{"metadata": {"vulnerability": "CVE-2024-21666", "count": 20, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2023-12-29T16:10:20.368Z", "date_only": false, "value": "2023-12-29T16:10:20.368Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-21666", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-30T06:02:17.588Z", "date_only": false, "value": "2023-12-30T06:02:17.588606Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21666", "record": "GSD-2024-21666", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-10T15:22:48Z", "date_only": false, "value": "2024-01-10T15:22:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C38C-C8MH-VQ68", "record": "GHSA-C38C-C8MH-VQ68", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-11T00:45:44.520Z", "date_only": false, "value": "2024-01-11T00:45:44.520Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21666", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-11T00:45:44.520Z", "date_only": false, "value": "2024-01-11T00:45:44.520Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-21666", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-11T01:15:45Z", "date_only": false, "value": "2024-01-11T01:15:45Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C38C-C8MH-VQ68", "record": "GHSA-C38C-C8MH-VQ68", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-01-11T01:15:45.623Z", "date_only": false, "value": "2024-01-11T01:15:45.623", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21666", "record": "FKIE_CVE-2024-21666", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-11T01:15:45.623Z", "date_only": false, "value": "2024-01-11T01:15:45.623", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-21666", "record": "GSD-2024-21666", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2024-01-11T02:26:30Z", "date_only": false, "value": "2024-01-11T02:26:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/166279", "record": "CVE-2024-21666", "field": "creation_timestamp", "uuid": "6ab60158-6a75-4541-9c3e-4db686434421", "content": "https://ift.tt/x0WpdbC\nCVE-2024-21666", "url": "https://t.me/ctinow/166279"}, {"timestamp": "2024-01-11T15:41:46Z", "date_only": false, "value": "2024-01-11T15:41:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C38C-C8MH-VQ68", "record": "GHSA-C38C-C8MH-VQ68", "field": "modified", "linked_record": true}, {"timestamp": "2024-01-18T13:20:45.647Z", "date_only": false, "value": "2024-01-18T13:20:45.647", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21666", "record": "GSD-2024-21666", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-01-18T17:17:00Z", "date_only": false, "value": "2024-01-18T17:17:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/169833", "record": "CVE-2024-21666", "field": "creation_timestamp", "uuid": "1f6e44cc-546a-43ea-adad-8661b5d54cea", "content": "https://ift.tt/TrBzMY2\nCVE-2024-21666 Exploit", "url": "https://t.me/ctinow/169833"}, {"timestamp": "2024-01-26T17:18:37Z", "date_only": false, "value": "2024-01-26T17:18:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3010", "record": "CVE-2024-21666", "field": "creation_timestamp", "uuid": "70d70c23-bb2a-4e93-9178-d0631305ffd7", "content": "#ExploitObserverAlert\n\nCVE-2024-21666\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2024-21666. The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management, segmentation, personalization and marketing automation. An authenticated and unauthorized user can access the list of potential duplicate users and see their data. Permissions are enforced when reaching the `/admin/customermanagementframework/duplicates/list` endpoint allowing an authenticated user without the permissions to access the endpoint and query the data available there. Unauthorized user(s) can access PII data from customers. This vulnerability has been patched in version 4.0.6.\n\nFIRST-EPSS: 0.000540000\nNVD-IS: 3.6\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/3010"}, {"timestamp": "2024-01-30T07:36:15Z", "date_only": false, "value": "2024-01-30T07:36:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/175716", "record": "CVE-2024-21666", "field": "creation_timestamp", "uuid": "47e2ba82-db18-404f-9b96-844e97ccb7da", "content": "https://ift.tt/un851Hx\nCVE-2024-21666 | Pimcore Customer Data Framework prior 4.0.6 Duplicate access control", "url": "https://t.me/ctinow/175716"}, {"timestamp": "2024-08-01T22:27:35.774Z", "date_only": false, "value": "2024-08-01T22:27:35.774Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-21666", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T20:11:57.371Z", "date_only": false, "value": "2025-05-08T20:11:57.371055Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21666", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-08T20:11:57.371Z", "date_only": false, "value": "2025-05-08T20:11:57.371055Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21666", "record": "FKIE_CVE-2024-21666", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-06-03T14:25:35.995Z", "date_only": false, "value": "2025-06-03T14:25:35.995Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-21666", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-03T14:25:35.995Z", "date_only": false, "value": "2025-06-03T14:25:35.995Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21666", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:09:57.203Z", "date_only": false, "value": "2026-06-17T07:09:57.203", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21666", "record": "FKIE_CVE-2024-21666", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-10T21:18:31.066Z", "anchors": {"origin": {"timestamp": "2024-01-10T15:22:48Z", "date_only": false, "value": "2024-01-10T15:22:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C38C-C8MH-VQ68", "record": "GHSA-C38C-C8MH-VQ68", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-01-10T15:22:48Z", "date_only": false, "value": "2024-01-10T15:22:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C38C-C8MH-VQ68", "record": "GHSA-C38C-C8MH-VQ68", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 89445343.066184, "hours": 24845.928629495556, "days": 1035.2470262289814, "min_seconds": 89445343.066184, "max_seconds": 89445343.066184, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-10T15:22:48Z", "date_only": false, "value": "2024-01-10T15:22:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C38C-C8MH-VQ68", "record": "GHSA-C38C-C8MH-VQ68", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-10T21:18:31.066Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}