{"metadata": {"vulnerability": "CVE-2024-21726", "count": 31, "kinds": {"milestone": 7, "sighting": 7, "kev": 0, "other": 17}}, "data": [{"timestamp": "2024-01-01T04:30:58.881Z", "date_only": false, "value": "2024-01-01T04:30:58.881Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-21726", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-01-01T06:02:05.274Z", "date_only": false, "value": "2024-01-01T06:02:05.274025Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21726", "record": "GSD-2024-21726", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-20T16:22:36.946Z", "date_only": false, "value": "2024-02-20T16:22:36.946Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21726", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-02-20T23:00:00Z", "date_only": false, "value": "2024-02-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0430", "record": "WID-SEC-W-2024-0430", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-02-20T23:00:00Z", "date_only": false, "value": "2024-02-20T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0430", "record": "WID-SEC-W-2024-0430", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-02-20T23:00:00Z", "date_only": false, "value": "2024-02-20T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0430", "record": "WID-SEC-W-2024-0430", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-02-22T14:40:05Z", "date_only": false, "value": "2024-02-22T14:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5448", "record": "CVE-2024-21726", "field": "creation_timestamp", "uuid": "30d6649f-217a-44e8-880f-e559e3471696", "content": "Joomla \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u044f\u0442\u044c XSS-\u043e\u0448\u0438\u0431\u043e\u043a \u0432 CMS, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \u043c\u043d\u043e\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0430\u0439\u0442\u044b RCE-\u0430\u0442\u0430\u043a\u0430\u043c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0432\u0435\u0440\u0441\u0438\u0439 Joomla \u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b SonarSource, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437. \n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n\n- CVE-2024-21722: \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f MFA \u043d\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0430\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0441\u0435\u0430\u043d\u0441\u044b \u043f\u0440\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 MFA \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n- CVE-2024-21723: \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c\u0443 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e.\n- CVE-2024-21724: \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0435\u0439 \u0432\u044b\u0431\u043e\u0440\u0430 \u043c\u0443\u043b\u044c\u0442\u0438\u043c\u0435\u0434\u0438\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f\u0445.\n- CVE-2024-21725: \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0435 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445.\n- CVE-2024-21726: \u043d\u0435\u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u0430\u044f \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u043a\u043e\u0434\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c XSS.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Joomla \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e CVE-2024-21725 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0441\u0430\u043c\u044b\u043c \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0440\u0438\u0441\u043a\u043e\u043c \u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0412 \u0442\u043e\u0436\u0435 \u0432\u0440\u0435\u043c\u044f \u0434\u0440\u0443\u0433\u0430\u044f CVE-2024-21726 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0444\u0438\u043b\u044c\u0442\u0440\u0430 Joomla, \u0438\u043c\u0435\u0435\u0442 \u0443\u043c\u0435\u0440\u0435\u043d\u043d\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u041e\u0434\u043d\u0430\u043a\u043e, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Sonar, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043c\u0430\u043d\u0443\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0447\u0442\u043e\u0431\u044b \u0442\u043e\u0442 \u0449\u0435\u043b\u043a\u043d\u0443\u043b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443.\n\n\u041f\u043e\u043a\u0430 Sonar \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043b\u043d\u043e\u043c \u043e\u0431\u044a\u0435\u043c\u0435, \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 \u043b\u0430\u0433 \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 Joomla.", "url": "https://t.me/true_secator/5448"}, {"timestamp": "2024-02-25T23:00:00Z", "date_only": false, "value": "2024-02-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0430", "record": "WID-SEC-W-2024-0430", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-02-25T23:00:00Z", "date_only": false, "value": "2024-02-25T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0430", "record": "WID-SEC-W-2024-0430", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-02-29T01:44:03Z", "date_only": false, "value": "2024-02-29T01:44:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R9WF-7V4G-F656", "record": "GHSA-R9WF-7V4G-F656", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-02-29T01:44:03.897Z", "date_only": false, "value": "2024-02-29T01:44:03.897", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21726", "record": "FKIE_CVE-2024-21726", "field": "published"}, {"timestamp": "2024-02-29T01:44:03.897Z", "date_only": false, "value": "2024-02-29T01:44:03.897", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-21726", "record": "GSD-2024-21726", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-02-29T02:56:14Z", "date_only": false, "value": "2024-02-29T02:56:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/196104", "record": "CVE-2024-21726", "field": "creation_timestamp", "uuid": "2fa99f62-5d26-4713-833a-c4e5ed9c30d2", "content": "https://ift.tt/h0fELzu\nCVE-2024-21726", "url": "https://t.me/ctinow/196104"}, {"timestamp": "2024-02-29T03:02:47Z", "date_only": false, "value": "2024-02-29T03:02:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/196121", "record": "CVE-2024-21726", "field": "creation_timestamp", "uuid": "ec098452-4969-43fb-b6f2-14c2fad260f0", "content": "https://ift.tt/h0fELzu\nCVE-2024-21726", "url": "https://t.me/ctinow/196121"}, {"timestamp": "2024-02-29T03:33:17Z", "date_only": false, "value": "2024-02-29T03:33:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R9WF-7V4G-F656", "record": "GHSA-R9WF-7V4G-F656", "field": "published"}, {"timestamp": "2024-02-29T13:49:29.390Z", "date_only": false, "value": "2024-02-29T13:49:29.390", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21726", "record": "GSD-2024-21726", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-29T20:46:25.073Z", "date_only": false, "value": "2024-02-29T20:46:25.073985Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21726", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-02-29T20:46:25.073Z", "date_only": false, "value": "2024-02-29T20:46:25.073985Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21726", "record": "FKIE_CVE-2024-21726", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-01T22:27:35.985Z", "date_only": false, "value": "2024-08-01T22:27:35.985Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-21726", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:05:27.597Z", "date_only": false, "value": "2024-08-15T18:05:27.597+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0430", "record": "WID-SEC-W-2024-0430", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-04T20:25:00.725Z", "date_only": false, "value": "2024-11-04T20:25:00.725Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21726", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-13T12:31:46Z", "date_only": false, "value": "2024-12-13T12:31:46Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R9WF-7V4G-F656", "record": "GHSA-R9WF-7V4G-F656", "field": "modified"}, {"timestamp": "2024-12-25T04:35:19.649Z", "date_only": false, "value": "2024-12-25T04:35:19.649Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-21726", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-12-25T04:35:19.649Z", "date_only": false, "value": "2024-12-25T04:35:19.649Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Joomla", "record": "CVE-2024-21726", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-03T14:48:46.964Z", "date_only": false, "value": "2025-06-03T14:48:46.964Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-JOOMLA-2024-21726", "record": "BIT-JOOMLA-2024-21726", "field": "published"}, {"timestamp": "2026-06-17T07:10:01.147Z", "date_only": false, "value": "2026-06-17T07:10:01.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21726", "record": "FKIE_CVE-2024-21726", "field": "lastModified"}, {"timestamp": "2026-07-06T11:00:12.957Z", "date_only": false, "value": "2026-07-06T11:00:12.957063Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/177", "record": "CVE-2024-21726", "field": "creation_timestamp", "uuid": "d6be5cfc-146a-4e52-a51d-f9d995361709", "url": "https://t.me/ZerodayAlert/177"}, {"timestamp": "2026-07-07T00:00:20.954Z", "date_only": false, "value": "2026-07-07T00:00:20.954469Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/177", "record": "CVE-2024-21726", "field": "creation_timestamp", "uuid": "756d854c-1563-42a4-829e-7b5313f8ff70", "url": "https://t.me/ZerodayAlert/177"}, {"timestamp": "2026-07-12T03:00:06.463Z", "date_only": false, "value": "2026-07-12T03:00:06.463957Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/177", "record": "CVE-2024-21726", "field": "creation_timestamp", "uuid": "1946c217-76f4-4bdb-89cf-ac803a63c54d", "url": "https://t.me/ZerodayAlert/177"}, {"timestamp": "2026-07-13T00:00:55.039Z", "date_only": false, "value": "2026-07-13T00:00:55.039936Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/177", "record": "CVE-2024-21726", "field": "creation_timestamp", "uuid": "3670dcc0-1b8b-4b24-9ed4-a1bb0bcc3deb", "url": "https://t.me/ZerodayAlert/177"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-JOOMLA-2024-21726", "record": "BIT-JOOMLA-2024-21726", "field": "modified"}]}