{"metadata": {"vulnerability": "CVE-2024-30270", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-03-26T12:52:00.935Z", "date_only": false, "value": "2024-03-26T12:52:00.935Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-30270", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-03T05:02:29.254Z", "date_only": false, "value": "2024-04-03T05:02:29.254443Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-30270", "record": "GSD-2024-30270", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T20:27:40.370Z", "date_only": false, "value": "2024-04-04T20:27:40.370Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-30270", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-04T21:15:16.577Z", "date_only": false, "value": "2024-04-04T21:15:16.577", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30270", "record": "FKIE_CVE-2024-30270", "field": "published"}, {"timestamp": "2024-04-04T21:15:16.577Z", "date_only": false, "value": "2024-04-04T21:15:16.577", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-30270", "record": "GSD-2024-30270", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-05T12:40:52.763Z", "date_only": false, "value": "2024-04-05T12:40:52.763", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-30270", "record": "GSD-2024-30270", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-05T18:05:43.220Z", "date_only": false, "value": "2024-04-05T18:05:43.220610Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-30270", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-04-05T18:05:43.220Z", "date_only": false, "value": "2024-04-05T18:05:43.220610Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30270", "record": "FKIE_CVE-2024-30270", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-04T17:38:21.058Z", "date_only": false, "value": "2024-06-04T17:38:21.058Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-30270", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-19T11:50:05Z", "date_only": false, "value": "2024-06-19T11:50:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5872", "record": "CVE-2024-30270", "field": "creation_timestamp", "uuid": "fac76f86-f615-4bc2-92f3-5f8c1fb28531", "content": "SonarSource \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Mailcow.\n\n\u041e\u0431\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u00a0\u0432\u0435\u0440\u0441\u0438\u0438 2024-04 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2024-30270\u00a0\u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 6,7 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e rspamd_maps(), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b.\n\n\u0414\u0440\u0443\u0433\u0430\u044f CVE-2024-31204\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 DEV_MODE.\n\n\u041e\u043d \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043e\u043d \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0438\u043b\u0438 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u0443\u044e\u0442\u0441\u044f \u0432 HTML \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u043a\u0430\u043a JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u044d\u0442\u0438\u043c \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0432 \u043f\u0430\u043d\u0435\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430, \u0432\u044b\u0437\u044b\u0432\u0430\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u043e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u0432\u0432\u043e\u0434\u043e\u043c, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u043c\u0443 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0441\u0435\u0430\u043d\u0441 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0432 \u0441\u0440\u0430\u0437\u0443 \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0447\u0435\u0442\u043d\u044b\u043c\u0438 \u0437\u0430\u043f\u0438\u0441\u044f\u043c\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Mailcow \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0435\u0441\u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0432\u0435\u043a\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 HTML \u0441 \u0444\u043e\u043d\u043e\u0432\u044b\u043c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c CSS, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442\u0441\u044f \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e URL-\u0430\u0434\u0440\u0435\u0441\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0435\u0433\u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 XSS.\n\n\u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u0436\u0435\u0440\u0442\u0432 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u043b\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u0432\u043e\u0439\u0434\u044f \u0432 \u043f\u0430\u043d\u0435\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e \u0435\u0439 \u043d\u0435 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043d\u0430\u0436\u0438\u043c\u0430\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0443 \u0432\u043d\u0443\u0442\u0440\u0438 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u043f\u0438\u0441\u044c\u043c\u0430 \u0438\u043b\u0438 \u0438\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 \u0441\u0430\u043c\u0438\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435\u043c, \u043b\u0438\u0448\u044c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u043d\u0435\u043b\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.", "url": "https://t.me/true_secator/5872"}, {"timestamp": "2024-06-21T04:49:40Z", "date_only": false, "value": "2024-06-21T04:49:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7729", "record": "CVE-2024-30270", "field": "creation_timestamp", "uuid": "18bd3753-cce9-475b-bd7e-eedaf29b64ff", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aThe script exploits Mailcow vulnerabilities via XSS and RCE, emphasizing the need for robust security measures and responsible usage to enhance web application security.\nURL\uff1ahttps://github.com/Alchemist3dot14/CVE-2024-30270-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/7729"}, {"timestamp": "2024-06-21T12:31:01Z", "date_only": false, "value": "2024-06-21T12:31:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/2134", "record": "CVE-2024-30270", "field": "creation_timestamp", "uuid": "0f02d3c1-0245-4987-896d-fbe9048cc730", "content": "CVE-2024-30270\n*\n\u0414\u044b\u0440\u043a\u0430 \u0432 \u043f\u043e\u0447\u0442\u043e\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Mailcow.\nCVSS: 6,7\n\u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044e rspamd_maps(), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b.\n*\nexploit\n\n#mail", "url": "https://t.me/proxy_bar/2134"}, {"timestamp": "2024-06-23T23:31:11Z", "date_only": false, "value": "2024-06-23T23:31:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10727", "record": "CVE-2024-30270", "field": "creation_timestamp", "uuid": "23af15e8-aa1c-4419-9b2b-98d930336ffe", "content": "#exploit\n1. Re-moo-te Code Execution in Mailcow: Always Sanitize Error Messages (CVE-2024-31204, CVE-2024-30270)\nhttps://www.sonarsource.com/blog/remote-code-execution-in-mailcow-always-sanitize-error-messages\n\n2. CVE-2024-0087,\nCVE-2024-0088:\nPreauth RCE on NVIDIA Triton Server\nhttps://sites.google.com/site/zhiniangpeng/blogs/Triton-RCE", "url": "https://t.me/CyberSecurityTechnologies/10727"}, {"timestamp": "2024-08-19T07:47:49.385Z", "date_only": false, "value": "2024-08-19T07:47:49.385Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-30270", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-12T20:52:59.248Z", "date_only": false, "value": "2024-12-12T20:52:59.248Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-30270", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-12-12T20:52:59.248Z", "date_only": false, "value": "2024-12-12T20:52:59.248Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-30270", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:26:38.643Z", "date_only": false, "value": "2026-06-17T07:26:38.643", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-30270", "record": "FKIE_CVE-2024-30270", "field": "lastModified"}, {"timestamp": "2026-07-26T02:00:22.316Z", "date_only": false, "value": "2026-07-26T02:00:22.316094Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/455", "record": "CVE-2024-30270", "field": "creation_timestamp", "uuid": "5ae75cef-4998-493f-a4d8-b05baeb16147", "url": "https://t.me/cyberwarehouse/455"}, {"timestamp": "2026-07-27T00:00:21.369Z", "date_only": false, "value": "2026-07-27T00:00:21.369596Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/455", "record": "CVE-2024-30270", "field": "creation_timestamp", "uuid": "f97ab175-d9a3-4be9-995a-86b2b868b4cb", "url": "https://t.me/cyberwarehouse/455"}]}