{"metadata": {"vulnerability": "CVE-2024-38821", "count": 61, "kinds": {"milestone": 22, "sighting": 7, "kev": 0, "other": 32}}, "data": [{"timestamp": "2024-06-19T22:32:06.583Z", "date_only": false, "value": "2024-06-19T22:32:06.583Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-38821", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-22T00:00:00Z", "date_only": true, "value": "2024-10-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0914", "record": "CERTFR-2024-AVI-0914", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-10-22T05:34:00Z", "date_only": false, "value": "2024-10-22T05:34:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / vmware", "record": "CVE-2024-38821", "field": "containers.cna.datePublic"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0914", "record": "CERTFR-2024-AVI-0914", "field": "last_revision_date"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0914", "record": "CERTFR-2024-AVI-0914", "field": "initial_release_date"}, {"timestamp": "2024-10-23T00:00:00Z", "date_only": false, "value": "2024-10-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0914", "record": "CERTFR-2024-AVI-0914", "field": "revisions.0.revision_date"}, {"timestamp": "2024-10-27T23:00:00Z", "date_only": false, "value": "2024-10-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3275", "record": "WID-SEC-W-2024-3275", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-10-27T23:00:00Z", "date_only": false, "value": "2024-10-27T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3275", "record": "WID-SEC-W-2024-3275", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-10-27T23:00:00Z", "date_only": false, "value": "2024-10-27T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3275", "record": "WID-SEC-W-2024-3275", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-10-28T07:06:13.404Z", "date_only": false, "value": "2024-10-28T07:06:13.404Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-38821", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-28T07:06:13.404Z", "date_only": false, "value": "2024-10-28T07:06:13.404Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2024-38821", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-28T07:15:07Z", "date_only": false, "value": "2024-10-28T07:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C4Q5-6C82-3QPW", "record": "GHSA-C4Q5-6C82-3QPW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-28T07:15:07.633Z", "date_only": false, "value": "2024-10-28T07:15:07.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38821", "record": "FKIE_CVE-2024-38821", "field": "published"}, {"timestamp": "2024-10-28T09:28:03Z", "date_only": false, "value": "2024-10-28T09:28:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/9093", "record": "CVE-2024-38821", "field": "creation_timestamp", "uuid": "420e0323-3ebb-4455-86e7-04ce0f61fd59", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-38821 - Spring WebFlux: Bypassing Spring Security Authorization Rules on Static Resources\", \n  \"Content\": \"CVE ID : CVE-2024-38821 \nPublished : Oct. 28, 2024, 7:15 a.m. | 44\u00a0minutes ago \nDescription : Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain circumstances.  \n  \nFor this to impact an application, all of the following must be true:  \n  \n  *  It must be a WebFlux application  \n  *  It must be using Spring's static resources support  \n  *  It must have a non-permitAll authorization rule applied to the static resources support \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/9093"}, {"timestamp": "2024-10-28T09:30:53Z", "date_only": false, "value": "2024-10-28T09:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C4Q5-6C82-3QPW", "record": "GHSA-C4Q5-6C82-3QPW", "field": "published"}, {"timestamp": "2024-10-29T05:03:03Z", "date_only": false, "value": "2024-10-29T05:03:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/1305", "record": "CVE-2024-38821", "field": "creation_timestamp", "uuid": "80f0eed7-813f-4a78-b61e-1458127471fa", "content": "\u26a1\ufe0fCVE-2024-38821 (CVSS 9.1) Allows Authorization Bypass in Spring WebFlux Applications.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/1305"}, {"timestamp": "2024-10-29T05:03:03Z", "date_only": false, "value": "2024-10-29T05:03:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/26249", "record": "CVE-2024-38821", "field": "creation_timestamp", "uuid": "2b39077e-303f-46f7-8435-59c7d21e5211", "content": "\u26a1\ufe0fCVE-2024-38821 (CVSS 9.1) Allows Authorization Bypass in Spring WebFlux Applications.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/26249"}, {"timestamp": "2024-10-31T00:00:00Z", "date_only": false, "value": "2024-10-31T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-38821", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-31T00:00:00Z", "date_only": false, "value": "2024-10-31T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38821", "record": "FKIE_CVE-2024-38821", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-01T03:55:20.442Z", "date_only": false, "value": "2024-11-01T03:55:20.442Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-38821", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-11T23:00:00Z", "date_only": false, "value": "2024-11-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3275", "record": "WID-SEC-W-2024-3275", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-01-23T13:31:51.936Z", "date_only": false, "value": "2025-01-23T13:31:51.936172Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/113877916793081869", "record": "CVE-2024-38821", "field": "creation_timestamp", "uuid": "c77fde33-c071-460e-b011-5ca9d61af758", "url": "https://infosec.exchange/users/cR0w/statuses/113877916793081869"}, {"timestamp": "2025-01-24T20:03:04.932Z", "date_only": false, "value": "2025-01-24T20:03:04.932Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-38821", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-24T20:03:04.932Z", "date_only": false, "value": "2025-01-24T20:03:04.932Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-38821", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-25T14:14:21Z", "date_only": false, "value": "2025-01-25T14:14:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/11730", "record": "CVE-2024-38821", "field": "creation_timestamp", "uuid": "66ebcbdd-afe8-4dca-9f72-e2bd9863d387", "content": "#WebApp_Security\n#Offensive_security\n1. Supply Chain Attacks in Web3: A New Era\nhttps://osec.io/blog/2024-06-10-supply-chain-attacks-a-new-era\n2. Spring WebFlux Authorization Bypass: CVE-2024-38821 Explained\nhttps://www.deep-kondah.com/spring-webflux-static-resource-access-vulnerability-cve-2024-38821-explained\n3. A CLI for cracking, testing vulnerabilities on Json Web Token\nhttps://github.com/tyki6/MyJWT", "url": "https://t.me/CyberSecurityTechnologies/11730"}, {"timestamp": "2025-01-26T23:00:00Z", "date_only": false, "value": "2025-01-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3275", "record": "WID-SEC-W-2024-3275", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-02-13T23:00:00Z", "date_only": false, "value": "2025-02-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3275", "record": "WID-SEC-W-2024-3275", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-02-13T23:00:00Z", "date_only": false, "value": "2025-02-13T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3275", "record": "WID-SEC-W-2024-3275", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-02-14T11:53:10.173Z", "date_only": false, "value": "2025-02-14T11:53:10.173+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3275", "record": "WID-SEC-W-2024-3275", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": true, "value": "2025-03-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0215", "record": "CERTFR-2025-AVI-0215", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0215", "record": "CERTFR-2025-AVI-0215", "field": "last_revision_date"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0215", "record": "CERTFR-2025-AVI-0215", "field": "initial_release_date"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0215", "record": "CERTFR-2025-AVI-0215", "field": "revisions.0.revision_date"}, {"timestamp": "2025-09-01T19:03:03Z", "date_only": false, "value": "2025-09-01T19:03:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "record": "CVE-2024-38821", "field": "creation_timestamp", "uuid": "9da9fd59-ff2b-47b6-b43b-c9a07c5d31a9"}, {"timestamp": "2025-10-17T00:00:00Z", "date_only": true, "value": "2025-10-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0924", "record": "CERTFR-2025-AVI-0924", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2025-10-20T00:00:00Z", "date_only": true, "value": "2025-10-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0924", "record": "CERTFR-2025-AVI-0924", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2025-10-21T00:00:00Z", "date_only": true, "value": "2025-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0924", "record": "CERTFR-2025-AVI-0924", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-10-23T00:00:00Z", "date_only": true, "value": "2025-10-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0924", "record": "CERTFR-2025-AVI-0924", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0924", "record": "CERTFR-2025-AVI-0924", "field": "last_revision_date"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": true, "value": "2025-10-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0924", "record": "CERTFR-2025-AVI-0924", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-10-24T00:00:00Z", "date_only": false, "value": "2025-10-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0924", "record": "CERTFR-2025-AVI-0924", "field": "revisions.0.revision_date"}, {"timestamp": "2025-12-15T00:00:00Z", "date_only": true, "value": "2025-12-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1131", "record": "CERTFR-2025-AVI-1131", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": true, "value": "2025-12-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1131", "record": "CERTFR-2025-AVI-1131", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2025-12-17T00:00:00Z", "date_only": true, "value": "2025-12-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1131", "record": "CERTFR-2025-AVI-1131", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1131", "record": "CERTFR-2025-AVI-1131", "field": "last_revision_date"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1131", "record": "CERTFR-2025-AVI-1131", "field": "initial_release_date"}, {"timestamp": "2025-12-19T00:00:00Z", "date_only": false, "value": "2025-12-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-1131", "record": "CERTFR-2025-AVI-1131", "field": "revisions.0.revision_date"}, {"timestamp": "2026-05-18T13:30:42.813Z", "date_only": false, "value": "2026-05-18T13:30:42.813239Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-KP10590", "record": "CLEANSTART-2026-KP10590", "field": "published"}, {"timestamp": "2026-06-17T07:41:06.613Z", "date_only": false, "value": "2026-06-17T07:41:06.613", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-38821", "record": "FKIE_CVE-2024-38821", "field": "lastModified"}, {"timestamp": "2026-07-29T19:46:04.209Z", "date_only": false, "value": "2026-07-29T19:46:04.209934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsoudn5uv22", "record": "CVE-2024-38821", "field": "creation_timestamp", "uuid": "2f2695e2-5d0d-4c11-877d-f4db6732b34e", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mrsoudn5uv22"}, {"timestamp": "2026-07-30T07:10:53Z", "date_only": false, "value": "2026-07-30T07:10:53Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-XN05312", "record": "CLEANSTART-2026-XN05312", "field": "published"}, {"timestamp": "2026-08-31T22:45:15Z", "date_only": false, "value": "2026-08-31T22:45:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C4Q5-6C82-3QPW", "record": "GHSA-C4Q5-6C82-3QPW", "field": "modified"}, {"timestamp": "2026-09-10T02:15:42.286Z", "date_only": false, "value": "2026-09-10T02:15:42.286808Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-GZ54612", "record": "CLEANSTART-2026-GZ54612", "field": "published"}, {"timestamp": "2026-09-18T09:26:51.243Z", "date_only": false, "value": "2026-09-18T09:26:51.243271Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-TA16647", "record": "CLEANSTART-2026-TA16647", "field": "published"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-GZ54612", "record": "CLEANSTART-2026-GZ54612", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-KP10590", "record": "CLEANSTART-2026-KP10590", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-XN05312", "record": "CLEANSTART-2026-XN05312", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-GZ54612", "record": "CLEANSTART-2026-GZ54612", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-KP10590", "record": "CLEANSTART-2026-KP10590", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-XN05312", "record": "CLEANSTART-2026-XN05312", "field": "withdrawn"}, {"timestamp": "2026-10-09T05:47:53Z", "date_only": false, "value": "2026-10-09T05:47:53Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-TA16647", "record": "CLEANSTART-2026-TA16647", "field": "modified"}]}