{"metadata": {"vulnerability": "CVE-2024-45687", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2024-09-04T15:55:26.099Z", "date_only": false, "value": "2024-09-04T15:55:26.099Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-45687", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-21T16:35:43.932Z", "date_only": false, "value": "2025-01-21T16:35:43.932Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-45687", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-21T16:35:43.932Z", "date_only": false, "value": "2025-01-21T16:35:43.932Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Payara", "record": "CVE-2024-45687", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-21T16:42:15.682Z", "date_only": false, "value": "2025-01-21T16:42:15.682186Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113867340763127015", "record": "CVE-2024-45687", "field": "creation_timestamp", "uuid": "fc472683-ff76-4a45-90fc-861d0dac2be3", "url": "https://infosec.exchange/users/cve/statuses/113867340763127015"}, {"timestamp": "2025-01-21T17:00:45Z", "date_only": false, "value": "2025-01-21T17:00:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2427", "record": "CVE-2024-45687", "field": "creation_timestamp", "uuid": "0629f365-5228-4fab-9b16-46ef5ae4b1d7", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45687\n\ud83d\udd39 Description: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in Payara Platform Payara Server (Grizzly, REST Management Interface modules), Payara Platform Payara Micro (Grizzly modules) allows Manipulating State, Identity Spoofing.This issue affects Payara Server: from 4.1.151 through 4.1.2.191.51, from 5.20.0 through 5.70.0, from 5.2020.2 through 5.2022.5, from 6.2022.1 through 6.2024.12, from 6.0.0 through 6.21.0; Payara Micro: from 4.1.152 through 4.1.2.191.51, from 5.20.0 through 5.70.0, from 5.2020.2 through 5.2022.5, from 6.2022.1 through 6.2024.12, from 6.0.0 through 6.21.0.\n\ud83d\udccf Published: 2025-01-21T16:35:43.932Z\n\ud83d\udccf Modified: 2025-01-21T16:35:43.932Z\n\ud83d\udd17 References:\n1. https://docs.payara.fish/enterprise/docs/Release%20Notes/Release%20Notes%206.22.0.html\n2. https://docs.payara.fish/enterprise/docs/5.71.0/Release%20Notes/Release%20Notes%205.71.0.html\n3. https://docs.payara.fish/community/docs/6.2025.1/Release%20Notes/Release%20Notes%206.2025.1.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/2427"}, {"timestamp": "2025-01-21T17:15:14Z", "date_only": false, "value": "2025-01-21T17:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MQH5-C2WX-V3PQ", "record": "GHSA-MQH5-C2WX-V3PQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-21T17:15:14.073Z", "date_only": false, "value": "2025-01-21T17:15:14.073", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45687", "record": "FKIE_CVE-2024-45687", "field": "published"}, {"timestamp": "2025-01-21T17:15:59.152Z", "date_only": false, "value": "2025-01-21T17:15:59.152954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbe5wrluc2n", "record": "CVE-2024-45687", "field": "creation_timestamp", "uuid": "28096ae6-cd10-4206-8c54-5338825a4a27", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbe5wrluc2n"}, {"timestamp": "2025-01-21T17:16:04.924Z", "date_only": false, "value": "2025-01-21T17:16:04.924874Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-45687", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-21T17:16:04.924Z", "date_only": false, "value": "2025-01-21T17:16:04.924874Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45687", "record": "FKIE_CVE-2024-45687", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-21T18:04:43.398Z", "date_only": false, "value": "2025-01-21T18:04:43.398095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgbgv2vkhx2h", "record": "CVE-2024-45687", "field": "creation_timestamp", "uuid": "6d94e823-f867-4fca-ad39-0d9bc7ef741c", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgbgv2vkhx2h"}, {"timestamp": "2025-01-21T18:31:07Z", "date_only": false, "value": "2025-01-21T18:31:07Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MQH5-C2WX-V3PQ", "record": "GHSA-MQH5-C2WX-V3PQ", "field": "published"}, {"timestamp": "2025-01-21T18:31:07Z", "date_only": false, "value": "2025-01-21T18:31:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MQH5-C2WX-V3PQ", "record": "GHSA-MQH5-C2WX-V3PQ", "field": "modified"}, {"timestamp": "2025-01-21T18:38:46Z", "date_only": false, "value": "2025-01-21T18:38:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/15983", "record": "CVE-2024-45687", "field": "creation_timestamp", "uuid": "7b4e3511-7de3-4d5f-a5c0-d27acca3a660", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45687 - Payara Platform HTTP Request Response Splitting\", \n  \"Content\": \"CVE ID : CVE-2024-45687 \nPublished : Jan. 21, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in Payara Platform Payara Server (Grizzly, REST Management Interface modules), Payara Platform Payara Micro (Grizzly modules) allows Manipulating State, Identity Spoofing.This issue affects Payara Server: from 4.1.151 through 4.1.2.191.51, from 5.20.0 through 5.70.0, from 5.2020.2 through 5.2022.5, from 6.2022.1 through 6.2024.12, from 6.0.0 through 6.21.0; Payara Micro: from 4.1.152 through 4.1.2.191.51, from 5.20.0 through 5.70.0, from 5.2020.2 through 5.2022.5, from 6.2022.1 through 6.2024.12, from 6.0.0 through 6.21.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/15983"}, {"timestamp": "2025-02-12T20:41:21.565Z", "date_only": false, "value": "2025-02-12T20:41:21.565Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-45687", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T20:41:21.565Z", "date_only": false, "value": "2025-02-12T20:41:21.565Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-45687", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:54:39.500Z", "date_only": false, "value": "2026-06-17T07:54:39.500", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45687", "record": "FKIE_CVE-2024-45687", "field": "lastModified"}]}