{"metadata": {"vulnerability": "CVE-2024-36694", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2024-05-30T00:00:00Z", "date_only": false, "value": "2024-05-30T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-36694", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-17T19:15:11Z", "date_only": false, "value": "2024-07-17T19:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XRH7-2GFQ-4RCQ", "record": "GHSA-XRH7-2GFQ-4RCQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-07-17T21:31:38Z", "date_only": false, "value": "2024-07-17T21:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XRH7-2GFQ-4RCQ", "record": "GHSA-XRH7-2GFQ-4RCQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-36694", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-12-18T19:41:07.355Z", "date_only": false, "value": "2024-12-18T19:41:07.355186Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113675525609760259", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "6156d6d4-70c5-43d0-844f-b76062674e53", "url": "https://infosec.exchange/users/cve/statuses/113675525609760259"}, {"timestamp": "2024-12-18T20:15:22.637Z", "date_only": false, "value": "2024-12-18T20:15:22.637", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-36694", "record": "FKIE_CVE-2024-36694", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-12-18T22:03:16Z", "date_only": false, "value": "2024-12-18T22:03:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XRH7-2GFQ-4RCQ", "record": "GHSA-XRH7-2GFQ-4RCQ", "field": "modified", "linked_record": true}, {"timestamp": "2024-12-18T22:04:02Z", "date_only": false, "value": "2024-12-18T22:04:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/13250", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "87718ba0-ae63-4841-a333-8184e5535ff7", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-36694 - OpenCart SSTI Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-36694 \nPublished : Dec. 18, 2024, 8:15 p.m. | 36\u00a0minutes ago \nDescription : OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/13250"}, {"timestamp": "2024-12-31T19:47:04.742Z", "date_only": false, "value": "2024-12-31T19:47:04.742620Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-36694", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-12-31T19:47:04.742Z", "date_only": false, "value": "2024-12-31T19:47:04.742620Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-36694", "record": "FKIE_CVE-2024-36694", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-12-31T19:48:58.465Z", "date_only": false, "value": "2024-12-31T19:48:58.465Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-36694", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-23T20:35:17.819Z", "date_only": false, "value": "2025-01-23T20:35:17.819Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-36694", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-23T20:35:17.819Z", "date_only": false, "value": "2025-01-23T20:35:17.819Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2024-36694", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-23T21:03:44Z", "date_only": false, "value": "2025-01-23T21:03:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2835", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "93aea42a-f692-44f2-9ae8-706151b8f70a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36694\n\ud83d\udd39 Description: OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.\n\ud83d\udccf Published: 2024-12-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T20:35:17.819Z\n\ud83d\udd17 References:\n1. https://github.com/opencart/opencart/releases/tag/4.0.2.3\n2. https://github.com/A3h1nt/CVEs/blob/main/OpenCart/Readme.md\n3. https://github.com/opencart/opencart/issues/13863\n4. https://medium.com/@pawarit.sanguanpang/opencart-v4-0-2-3-server-side-template-injection-0b173a3bdcf9\n5. https://github.com/PawaritSanguanpang/CVEs/blob/main/OpenCart/CVE-2024-36694/README.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/2835", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-15T13:28:32Z", "date_only": false, "value": "2025-09-15T13:28:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "4ca99ee6-27e4-4a19-a802-fdc47d91d5d1"}, {"timestamp": "2025-09-16T03:45:05Z", "date_only": false, "value": "2025-09-16T03:45:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "756beae2-a32e-4c99-acfd-fa40d8e728f3"}, {"timestamp": "2026-03-08T06:16:13Z", "date_only": false, "value": "2026-03-08T06:16:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3714", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "f6fc1b2b-f6d7-4c8f-9c42-c32ed083dda9", "url": "https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-3714"}, {"timestamp": "2026-06-17T07:37:07.150Z", "date_only": false, "value": "2026-06-17T07:37:07.150", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-36694", "record": "FKIE_CVE-2024-36694", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T12:35:34.458Z", "anchors": {"origin": {"timestamp": "2024-07-17T21:31:38Z", "date_only": false, "value": "2024-07-17T21:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XRH7-2GFQ-4RCQ", "record": "GHSA-XRH7-2GFQ-4RCQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-07-17T21:31:38Z", "date_only": false, "value": "2024-07-17T21:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XRH7-2GFQ-4RCQ", "record": "GHSA-XRH7-2GFQ-4RCQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2025-01-23T21:03:44Z", "date_only": false, "value": "2025-01-23T21:03:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2835", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "93aea42a-f692-44f2-9ae8-706151b8f70a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36694\n\ud83d\udd39 Description: OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.\n\ud83d\udccf Published: 2024-12-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T20:35:17.819Z\n\ud83d\udd17 References:\n1. https://github.com/opencart/opencart/releases/tag/4.0.2.3\n2. https://github.com/A3h1nt/CVEs/blob/main/OpenCart/Readme.md\n3. https://github.com/opencart/opencart/issues/13863\n4. https://medium.com/@pawarit.sanguanpang/opencart-v4-0-2-3-server-side-template-injection-0b173a3bdcf9\n5. https://github.com/PawaritSanguanpang/CVEs/blob/main/OpenCart/CVE-2024-36694/README.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/2835", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 16414326.0, "hours": 4559.535, "days": 189.980625, "min_seconds": 16414326.0, "max_seconds": 16414326.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-07-17T21:31:38Z", "date_only": false, "value": "2024-07-17T21:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XRH7-2GFQ-4RCQ", "record": "GHSA-XRH7-2GFQ-4RCQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-01-23T21:03:44Z", "date_only": false, "value": "2025-01-23T21:03:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2835", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "93aea42a-f692-44f2-9ae8-706151b8f70a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36694\n\ud83d\udd39 Description: OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.\n\ud83d\udccf Published: 2024-12-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T20:35:17.819Z\n\ud83d\udd17 References:\n1. https://github.com/opencart/opencart/releases/tag/4.0.2.3\n2. https://github.com/A3h1nt/CVEs/blob/main/OpenCart/Readme.md\n3. https://github.com/opencart/opencart/issues/13863\n4. https://medium.com/@pawarit.sanguanpang/opencart-v4-0-2-3-server-side-template-injection-0b173a3bdcf9\n5. https://github.com/PawaritSanguanpang/CVEs/blob/main/OpenCart/CVE-2024-36694/README.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/2835", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 73321436.458863, "hours": 20367.065683017503, "days": 848.6277367923959, "min_seconds": 73321436.458863, "max_seconds": 73321436.458863, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-07-17T21:31:38Z", "date_only": false, "value": "2024-07-17T21:31:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XRH7-2GFQ-4RCQ", "record": "GHSA-XRH7-2GFQ-4RCQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-13T12:35:34.458Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 56907110.458863, "hours": 15807.5306830175, "days": 658.6471117923958, "min_seconds": 56907110.458863, "max_seconds": 56907110.458863, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-23T21:03:44Z", "date_only": false, "value": "2025-01-23T21:03:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2835", "record": "CVE-2024-36694", "field": "creation_timestamp", "uuid": "93aea42a-f692-44f2-9ae8-706151b8f70a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36694\n\ud83d\udd39 Description: OpenCart 4.0.2.3 is vulnerable to Server-Side Template Injection (SSTI) via the Theme Editor Function.\n\ud83d\udccf Published: 2024-12-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-23T20:35:17.819Z\n\ud83d\udd17 References:\n1. https://github.com/opencart/opencart/releases/tag/4.0.2.3\n2. https://github.com/A3h1nt/CVEs/blob/main/OpenCart/Readme.md\n3. https://github.com/opencart/opencart/issues/13863\n4. https://medium.com/@pawarit.sanguanpang/opencart-v4-0-2-3-server-side-template-injection-0b173a3bdcf9\n5. https://github.com/PawaritSanguanpang/CVEs/blob/main/OpenCart/CVE-2024-36694/README.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/2835", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T12:35:34.458Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}