{"metadata": {"vulnerability": "CVE-2024-5257", "count": 32, "kinds": {"milestone": 9, "sighting": 6, "kev": 0, "other": 17}}, "data": [{"timestamp": "2024-05-22T23:30:38.473Z", "date_only": false, "value": "2024-05-22T23:30:38.473Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-5257", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-07-10T00:00:00Z", "date_only": true, "value": "2024-07-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0572", "record": "CERTFR-2024-AVI-0572", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1592", "record": "WID-SEC-W-2024-1592", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1592", "record": "WID-SEC-W-2024-1592", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1592", "record": "WID-SEC-W-2024-1592", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-07-10T22:00:00Z", "date_only": false, "value": "2024-07-10T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1592", "record": "WID-SEC-W-2024-1592", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": false, "value": "2024-07-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0572", "record": "CERTFR-2024-AVI-0572", "field": "last_revision_date"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": false, "value": "2024-07-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0572", "record": "CERTFR-2024-AVI-0572", "field": "initial_release_date"}, {"timestamp": "2024-07-11T00:00:00Z", "date_only": false, "value": "2024-07-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0572", "record": "CERTFR-2024-AVI-0572", "field": "revisions.0.revision_date"}, {"timestamp": "2024-07-11T06:57:09.372Z", "date_only": false, "value": "2024-07-11T06:57:09.372Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5257", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-07-11T07:15:00Z", "date_only": false, "value": "2024-07-11T07:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-5257", "record": "UBUNTU-CVE-2024-5257", "field": "published"}, {"timestamp": "2024-07-11T07:15:04Z", "date_only": false, "value": "2024-07-11T07:15:04Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C5G3-C7F9-3HCJ", "record": "GHSA-C5G3-C7F9-3HCJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-07-11T07:15:04.257Z", "date_only": false, "value": "2024-07-11T07:15:04.257", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5257", "record": "FKIE_CVE-2024-5257", "field": "published"}, {"timestamp": "2024-07-11T09:30:57Z", "date_only": false, "value": "2024-07-11T09:30:57Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C5G3-C7F9-3HCJ", "record": "GHSA-C5G3-C7F9-3HCJ", "field": "published"}, {"timestamp": "2024-07-11T09:30:57Z", "date_only": false, "value": "2024-07-11T09:30:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C5G3-C7F9-3HCJ", "record": "GHSA-C5G3-C7F9-3HCJ", "field": "modified"}, {"timestamp": "2024-07-11T09:57:28Z", "date_only": false, "value": "2024-07-11T09:57:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/644", "record": "CVE-2024-5257", "field": "creation_timestamp", "uuid": "06b73f79-15a3-4ca5-824c-dbb6425d812c", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5257 - An issue was discovered in GitLab CE/EE affecting\", \n  \"Content\": \"CVE ID : CVE-2024-5257 \nPublished : July 11, 2024, 7:15 a.m. | 38\u00a0minutes ago \nDescription : An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with `admin_compliance_framework` custom role may have been able to modify the URL for a group namespace. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/644"}, {"timestamp": "2024-07-11T12:00:06Z", "date_only": false, "value": "2024-07-11T12:00:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5957", "record": "CVE-2024-5257", "field": "creation_timestamp", "uuid": "5dd620ee-0a1c-438c-91ac-d11189ec2b17", "content": "GitLab \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GitLab Community \u0438 Enterprise, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438/\u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f (CI/CD).\n\nCVE-2024-6385\u00a0\u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS 9,6 \u0438\u0437 10 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 GitLab CE/EE \u043e\u0442 15.8 \u0434\u043e 16.11.6, \u043e\u0442 17.0 \u0434\u043e 17.0.4 \u0438 \u043e\u0442 17.1 \u0434\u043e 17.1.2.\n\n\u041f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 GitLab \u0435\u0449\u0435 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0434\u0440\u0443\u0433\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u0432 \u043a\u043e\u043d\u0446\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 (CVE-2024-5655, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,6), \u043a\u043e\u0442\u043e\u0440\u0443\u044e  \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 GitLab Community \u0438 Enterprise 17.1.2, 17.0.4 \u0438 16.11.6 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0432\u0441\u0435 \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c GitLab.com \u0438 GitLab Dedicated \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\n\u0412 \u044d\u0442\u0438\u0445 \u0436\u0435 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVE-2024-5257, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 4,9), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e-\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0443 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 admin_compliance_framework \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c URL-\u0430\u0434\u0440\u0435\u0441 \u0434\u043b\u044f \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0438\u043c\u0435\u043d \u0433\u0440\u0443\u043f\u043f\u044b.", "url": "https://t.me/true_secator/5957"}, {"timestamp": "2024-07-13T07:20:36.387Z", "date_only": false, "value": "2024-07-13T07:20:36.387Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2024-5257", "record": "BIT-GITLAB-2024-5257", "field": "published"}, {"timestamp": "2024-07-23T18:30:14.386Z", "date_only": false, "value": "2024-07-23T18:30:14.386629Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5257", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-23T18:30:14.386Z", "date_only": false, "value": "2024-07-23T18:30:14.386629Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5257", "record": "FKIE_CVE-2024-5257", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-23T18:30:27.972Z", "date_only": false, "value": "2024-07-23T18:30:27.972Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5257", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:03:11.049Z", "date_only": false, "value": "2024-08-01T21:03:11.049Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-5257", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:11:13.568Z", "date_only": false, "value": "2024-08-15T18:11:13.568+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1592", "record": "WID-SEC-W-2024-1592", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-29T15:04:59.125Z", "date_only": false, "value": "2024-08-29T15:04:59.125Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-5257", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-29T15:04:59.125Z", "date_only": false, "value": "2024-08-29T15:04:59.125Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2024-5257", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-12-28T15:43:51.711Z", "date_only": false, "value": "2025-12-28T15:43:51.711083Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mb2nyzfti22d", "record": "CVE-2024-5257", "field": "creation_timestamp", "uuid": "8df4558e-1f76-49be-94c9-09101c456d0f", "url": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3mb2nyzfti22d"}, {"timestamp": "2026-06-17T08:15:33.227Z", "date_only": false, "value": "2026-06-17T08:15:33.227", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5257", "record": "FKIE_CVE-2024-5257", "field": "lastModified"}, {"timestamp": "2026-07-26T02:02:07.845Z", "date_only": false, "value": "2026-07-26T02:02:07.845643Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2947", "record": "CVE-2024-5257", "field": "creation_timestamp", "uuid": "ee451d65-af5b-4179-9475-fa945f96c5e1", "url": "https://t.me/EchelonEyes/2947"}, {"timestamp": "2026-07-27T00:00:45.679Z", "date_only": false, "value": "2026-07-27T00:00:45.679510Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2947", "record": "CVE-2024-5257", "field": "creation_timestamp", "uuid": "adbdc0f5-db67-4fe5-9b24-d6f34b742d69", "url": "https://t.me/EchelonEyes/2947"}, {"timestamp": "2026-07-28T00:00:43.368Z", "date_only": false, "value": "2026-07-28T00:00:43.368145Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/2947", "record": "CVE-2024-5257", "field": "creation_timestamp", "uuid": "300c16e1-0d2d-4c84-9e37-67a0506a89de", "url": "https://t.me/EchelonEyes/2947"}, {"timestamp": "2026-09-10T15:46:03.895Z", "date_only": false, "value": "2026-09-10T15:46:03.895Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2024-5257", "record": "BIT-GITLAB-2024-5257", "field": "modified"}, {"timestamp": "2026-10-17T09:22:29Z", "date_only": false, "value": "2026-10-17T09:22:29Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-5257", "record": "UBUNTU-CVE-2024-5257", "field": "modified"}]}