{"metadata": {"vulnerability": "CVE-2024-51479", "count": 63, "kinds": {"milestone": 25, "sighting": 12, "kev": 0, "other": 26}}, "data": [{"timestamp": "2024-10-28T14:20:59.335Z", "date_only": false, "value": "2024-10-28T14:20:59.335Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-51479", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-12-17T15:09:06Z", "date_only": false, "value": "2024-12-17T15:09:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7GFC-8CQ8-JH5F", "record": "GHSA-7GFC-8CQ8-JH5F", "field": "published"}, {"timestamp": "2024-12-17T18:13:02.806Z", "date_only": false, "value": "2024-12-17T18:13:02.806Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-51479", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-12-17T18:13:02.806Z", "date_only": false, "value": "2024-12-17T18:13:02.806000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-12-17T18:13:02.806Z", "date_only": false, "value": "2024-12-17T18:13:02.806Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-51479", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-17T18:25:35.808Z", "date_only": false, "value": "2024-12-17T18:25:35.808340Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113669566323116247", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "4f20ecda-f9ed-4e8f-b187-388be38e4db9", "url": "https://infosec.exchange/users/cve/statuses/113669566323116247"}, {"timestamp": "2024-12-17T19:00:43.117Z", "date_only": false, "value": "2024-12-17T19:00:43.117301+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2024-12-17T19:15:06Z", "date_only": false, "value": "2024-12-17T19:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7GFC-8CQ8-JH5F", "record": "GHSA-7GFC-8CQ8-JH5F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-12-17T19:15:06.697Z", "date_only": false, "value": "2024-12-17T19:15:06.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-51479", "record": "FKIE_CVE-2024-51479", "field": "published"}, {"timestamp": "2024-12-17T20:36:20.367Z", "date_only": false, "value": "2024-12-17T20:36:20.367589Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-51479", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-12-17T20:36:20.367Z", "date_only": false, "value": "2024-12-17T20:36:20.367589Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-51479", "record": "FKIE_CVE-2024-51479", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-17T20:36:28.402Z", "date_only": false, "value": "2024-12-17T20:36:28.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-51479", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-12-17T20:36:28.402Z", "date_only": false, "value": "2024-12-17T20:36:28.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-51479", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-17T20:57:59Z", "date_only": false, "value": "2024-12-17T20:57:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/13124", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "a075a18b-ee27-4ab7-8415-bd0afdf46b9a", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-51479 - Vercel Next.js Root Directory Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-51479 \nPublished : Dec. 17, 2024, 7:15 p.m. | 34\u00a0minutes ago \nDescription : Next.js is a React framework for building full-stack web applications. In affected versions if a Next.js application is performing authorization in middleware based on pathname, it was possible for this authorization to be bypassed for pages directly under the application's root directory. For example: * [Not affected] `` * [Affected] `` * [Not affected] ``. This issue is patched in Next.js `14.2.15` and later. If your Next.js application is hosted on Vercel, this vulnerability has been automatically mitigated, regardless of Next.js version. There are no official workarounds for this vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/13124"}, {"timestamp": "2024-12-19T14:46:47.588Z", "date_only": false, "value": "2024-12-19T14:46:47.588684Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ldo4gqssju2e", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "6be0b92f-02da-46c9-bde1-a065fdaaaba6", "url": "https://bsky.app/profile/bolhasec.com/post/3ldo4gqssju2e"}, {"timestamp": "2024-12-20T04:52:18.141Z", "date_only": false, "value": "2024-12-20T04:52:18.141001Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/mttaggart/statuses/113683355203817189", "record": "cve-2024-51479", "field": "creation_timestamp", "uuid": "2e8ee44f-e7b0-4333-9eaa-8c5a4e86e713", "url": "https://infosec.exchange/users/mttaggart/statuses/113683355203817189"}, {"timestamp": "2025-01-03T20:19:11.525Z", "date_only": false, "value": "2025-01-03T20:19:11.525000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2025-01-03T21:00:40.973Z", "date_only": false, "value": "2025-01-03T21:00:40.973999+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2025-02-23T20:21:25Z", "date_only": false, "value": "2025-02-23T20:21:25.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lXRzYknB6SBUTd3lazzYxB5xeOdU1Cklky9RaxLfOhf4z6Qw", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "04104f13-934f-4154-b257-ffb9cdc9c3b8"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": true, "value": "2025-03-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": true, "value": "2025-04-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": true, "value": "2025-04-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "last_revision_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "initial_release_date"}, {"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0279", "record": "CERTFR-2025-AVI-0279", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-06T23:09:44Z", "date_only": false, "value": "2025-04-06T23:09:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/suboxone_chatroom/7709", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "1dd6d475-8c40-4e87-8a30-c9264db78f0a", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "url": "https://t.me/suboxone_chatroom/7709"}, {"timestamp": "2025-04-10T14:20:32Z", "date_only": false, "value": "2025-04-10T14:20:32+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-10T14:20:32Z", "date_only": false, "value": "2025-04-10T14:20:32+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-04-10T14:20:32Z", "date_only": false, "value": "2025-04-10T14:20:32+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-08-10T18:27:45Z", "date_only": false, "value": "2025-08-10T18:27:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "cd9fb7d5-4984-437c-84b9-b33efdc4770e"}, {"timestamp": "2025-08-29T00:00:00Z", "date_only": true, "value": "2025-08-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0760", "record": "CERTFR-2025-AVI-0760", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2025-09-01T00:00:00Z", "date_only": true, "value": "2025-09-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0760", "record": "CERTFR-2025-AVI-0760", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2025-09-03T00:00:00Z", "date_only": true, "value": "2025-09-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0760", "record": "CERTFR-2025-AVI-0760", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-09-04T00:00:00Z", "date_only": true, "value": "2025-09-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0760", "record": "CERTFR-2025-AVI-0760", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0760", "record": "CERTFR-2025-AVI-0760", "field": "last_revision_date"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0760", "record": "CERTFR-2025-AVI-0760", "field": "initial_release_date"}, {"timestamp": "2025-09-05T00:00:00Z", "date_only": false, "value": "2025-09-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0760", "record": "CERTFR-2025-AVI-0760", "field": "revisions.0.revision_date"}, {"timestamp": "2025-09-10T07:48:00Z", "date_only": false, "value": "2025-09-10T07:48:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "683fdcc7-5486-43d9-8c9b-70c817b3bdae"}, {"timestamp": "2025-09-10T21:12:24Z", "date_only": false, "value": "2025-09-10T21:12:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7GFC-8CQ8-JH5F", "record": "GHSA-7GFC-8CQ8-JH5F", "field": "modified"}, {"timestamp": "2026-02-25T00:00:00Z", "date_only": true, "value": "2026-02-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0249", "record": "CERTFR-2026-AVI-0249", "field": "vendor_advisories.7.published_at"}, {"timestamp": "2026-03-02T00:00:00Z", "date_only": true, "value": "2026-03-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0249", "record": "CERTFR-2026-AVI-0249", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-03-03T00:00:00Z", "date_only": true, "value": "2026-03-03", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0249", "record": "CERTFR-2026-AVI-0249", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": true, "value": "2026-03-04", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0249", "record": "CERTFR-2026-AVI-0249", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2026-03-05T00:00:00Z", "date_only": true, "value": "2026-03-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0249", "record": "CERTFR-2026-AVI-0249", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0249", "record": "CERTFR-2026-AVI-0249", "field": "last_revision_date"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": true, "value": "2026-03-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0249", "record": "CERTFR-2026-AVI-0249", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-03-06T00:00:00Z", "date_only": false, "value": "2026-03-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0249", "record": "CERTFR-2026-AVI-0249", "field": "revisions.0.revision_date"}, {"timestamp": "2026-03-13T00:00:00Z", "date_only": true, "value": "2026-03-13", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0327", "record": "CERTFR-2026-AVI-0327", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-03-16T00:00:00Z", "date_only": true, "value": "2026-03-16", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0327", "record": "CERTFR-2026-AVI-0327", "field": "vendor_advisories.5.published_at"}, {"timestamp": "2026-03-17T00:00:00Z", "date_only": true, "value": "2026-03-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0327", "record": "CERTFR-2026-AVI-0327", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-03-18T00:00:00Z", "date_only": true, "value": "2026-03-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0327", "record": "CERTFR-2026-AVI-0327", "field": "vendor_advisories.3.published_at"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0327", "record": "CERTFR-2026-AVI-0327", "field": "last_revision_date"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0327", "record": "CERTFR-2026-AVI-0327", "field": "initial_release_date"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0327", "record": "CERTFR-2026-AVI-0327", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-17T08:05:46.410Z", "date_only": false, "value": "2026-06-17T08:05:46.410", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-51479", "record": "FKIE_CVE-2024-51479", "field": "lastModified"}, {"timestamp": "2026-07-09T03:00:08.726Z", "date_only": false, "value": "2026-07-09T03:00:08.726356Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1732", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "d20da2ab-a361-4073-a534-25bedfa370cb", "url": "https://t.me/brutsecurity/1732"}, {"timestamp": "2026-07-10T00:00:32.271Z", "date_only": false, "value": "2026-07-10T00:00:32.271113Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1732", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "48752a9a-551d-4a86-a2c0-ef0930be7030", "url": "https://t.me/brutsecurity/1732"}, {"timestamp": "2026-07-11T13:00:05.289Z", "date_only": false, "value": "2026-07-11T13:00:05.289814Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1732", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "3e85c374-1265-43a4-9d3b-4aea32eb1ea4", "url": "https://t.me/brutsecurity/1732"}, {"timestamp": "2026-07-12T00:00:48.785Z", "date_only": false, "value": "2026-07-12T00:00:48.785895Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1732", "record": "CVE-2024-51479", "field": "creation_timestamp", "uuid": "0214085c-cc0c-4d64-96e1-73960cc563a5", "url": "https://t.me/brutsecurity/1732"}, {"timestamp": "2026-09-04T00:36:24Z", "date_only": false, "value": "2026-09-04T00:36:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-06T04:22:27Z", "date_only": false, "value": "2026-09-06T04:22:27+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-06T04:22:27Z", "date_only": false, "value": "2026-09-06T04:22:27+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "document.tracking.generator.date"}, {"timestamp": "2026-09-06T04:22:27Z", "date_only": false, "value": "2026-09-06T04:22:27+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2025:3807", "record": "RHSA-2025:3807", "field": "document.tracking.current_release_date"}]}