{"metadata": {"vulnerability": "CVE-2024-5276", "count": 41, "kinds": {"milestone": 4, "sighting": 17, "kev": 11, "other": 9}}, "data": [{"timestamp": "2024-05-23T16:28:47.722Z", "date_only": false, "value": "2024-05-23T16:28:47.722Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-5276", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-06-25T19:13:54.585Z", "date_only": false, "value": "2024-06-25T19:13:54.585Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-5276", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-25T19:13:54.585Z", "date_only": false, "value": "2024-06-25T19:13:54.585Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Fortra", "record": "CVE-2024-5276", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-25T20:15:14Z", "date_only": false, "value": "2024-06-25T20:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MGCV-6R68-PW73", "record": "GHSA-MGCV-6R68-PW73", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-25T20:15:14.013Z", "date_only": false, "value": "2024-06-25T20:15:14.013", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5276", "record": "FKIE_CVE-2024-5276", "field": "published"}, {"timestamp": "2024-06-25T21:31:16Z", "date_only": false, "value": "2024-06-25T21:31:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MGCV-6R68-PW73", "record": "GHSA-MGCV-6R68-PW73", "field": "published"}, {"timestamp": "2024-06-27T00:00:00Z", "date_only": false, "value": "2024-06-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5276", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-27T00:00:00Z", "date_only": false, "value": "2024-06-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5276", "record": "FKIE_CVE-2024-5276", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-27T08:58:21Z", "date_only": false, "value": "2024-06-27T08:58:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/5177", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "cca46905-8b1c-44e7-bb6e-da326dcdbaf4", "content": "\ud83d\udea8 Critical security flaw found in Fortra FileCatalyst Workflow. CVE-2024-5276 scores 9.8 on CVSS. Patch now to protect your data from SQL injection attacks. \n \nDetails here \u27a1\ufe0f https://thehackernews.com/2024/06/critical-sqli-vulnerability-found-in.html", "url": "https://t.me/thehackernews/5177"}, {"timestamp": "2024-06-27T09:35:36Z", "date_only": false, "value": "2024-06-27T09:35:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/2169", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "545cf4e2-6d4f-41a9-94d7-48fba5feeda5", "content": "Critical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application\nhttps://thehackernews.com/2024/06/critical-sqli-vulnerability-found-in.html\n\nA critical security flaw has been disclosed in Fortra FileCatalyst Workflow that, if left unpatched, could allow an attacker to tamper with the application database.\nTracked as CVE-2024-5276, the vulnerability carries a CVSS score of 9.8. It impacts FileCatalyst Workflow versions 5.1.6 Build 135 and earlier. It has been addressed in version 5.1.6 build 139.\n\"An SQL injection vulnerability in", "url": "https://t.me/KomunitiSiber/2169"}, {"timestamp": "2024-06-27T10:23:20Z", "date_only": false, "value": "2024-06-27T10:23:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/qmEDHLBNdp1opQyESxLY8cSE-jzGu9bN7IsUBrgZMpYv7A", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "87d261ff-bf93-40d0-a63b-0dab066fc96d"}, {"timestamp": "2024-06-27T10:26:03Z", "date_only": false, "value": "2024-06-27T10:26:03.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ng_1lgMwTSCJnp-rJFosgkTYQzHJ1Y0nL6lbhrTLhXNu0ys", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "d2139380-a543-440b-b3f0-ec73a15f171b"}, {"timestamp": "2024-06-27T12:12:33Z", "date_only": false, "value": "2024-06-27T12:12:33.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1dFSSrOtaf9E7PxA3ikRLCY6Nad2bX8mdzHI4LTg2n3Rxg", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "9cad134a-f314-4bf1-a4ab-b1cdd789aca3"}, {"timestamp": "2024-06-27T12:12:34Z", "date_only": false, "value": "2024-06-27T12:12:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/13415", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "d71b6526-bd5f-4d4f-b6de-c4b954bcde14", "content": "The Hacker News\nCritical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application\n\nA critical security flaw has been disclosed in Fortra FileCatalyst Workflow that, if left unpatched, could allow an attacker to tamper with the application database.\nTracked as CVE-2024-5276, the vulnerability carries a CVSS score of 9.8. It impacts FileCatalyst Workflow versions 5.1.6 Build 135 and earlier. It has been addressed in version 5.1.6 build 139.\n\"An SQL injection vulnerability in", "url": "https://t.me/tengkorakcybercrewz/13415"}, {"timestamp": "2024-06-27T12:12:34Z", "date_only": false, "value": "2024-06-27T12:12:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/2656", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "9146b64c-6868-431c-b2e3-23b5ec5d82e7", "content": "The Hacker News\nCritical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application\n\nA critical security flaw has been disclosed in Fortra FileCatalyst Workflow that, if left unpatched, could allow an attacker to tamper with the application database.\nTracked as CVE-2024-5276, the vulnerability carries a CVSS score of 9.8. It impacts FileCatalyst Workflow versions 5.1.6 Build 135 and earlier. It has been addressed in version 5.1.6 build 139.\n\"An SQL injection vulnerability in", "url": "https://t.me/tengkorakcybercrewz/2656"}, {"timestamp": "2024-06-27T13:59:48Z", "date_only": false, "value": "2024-06-27T13:59:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/5907", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "67cd83b6-c4e7-496c-a5c6-ae0a987f15ff", "content": "Fortra \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 FileCatalyst Workflow SQLi, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC.\n\n\u0420\u0435\u0448\u0435\u043d\u0438\u0435 FileCatalyst Workflow \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u043e\u0431\u044a\u0435\u043c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \n\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0434\u043b\u044f \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0447\u0430\u0441\u0442\u043d\u044b\u0445 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430\u0445.\n\nCVE-2024-5276 (CVSS v3.1:9.8) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Tenable 15 \u043c\u0430\u044f 2024 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0432 \u0431\u0430\u0437\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 FileCatalyst Workflow 5.1.6 (\u0441\u0431\u043e\u0440\u043a\u0430 135 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438), \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 FileCatalyst Workflow 5.1.6 (\u0441\u0431\u043e\u0440\u043a\u0430 139).\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0435 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CVE-2024-5276 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\nTenable \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 Fortra 22 \u043c\u0430\u044f, \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0432 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0432 \u043f\u0430\u0431\u043b\u0438\u043a \u0441\u0440\u0430\u0437\u0443 \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Fortra\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442, \u043a\u0430\u043a \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 jobID \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 URL-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Workflow.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u0435\u0442\u043e\u0434 findJob \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0437\u0430\u0434\u0430\u043d\u0438\u044f \u0431\u0435\u0437 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u044f WHERE \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0435 SQL, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0421\u043a\u0440\u0438\u043f\u0442 Tenable \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e \u0432\u0445\u043e\u0434\u0438\u0442 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 FileCatalyst Workflow \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 jobID, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u043d\u043e\u0432\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f-\u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 (operator) \u0441 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c (password123).\n\n\u0412 \u043a\u043e\u043d\u0446\u0435 \u043a\u043e\u043d\u0446\u043e\u0432 \u043e\u043d \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0442\u043e\u043a\u0435\u043d \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u043d\u043e\u0432\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0435\u0449\u0435 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e, \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e PoC \u0431\u044b\u0441\u0442\u0440\u043e \u0438\u0437\u043c\u0435\u043d\u0438\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e. \u041c\u043e\u0436\u043d\u043e \u043d\u0435 \u0441\u043e\u043c\u043d\u0435\u0432\u0430\u0442\u044c\u0441\u044f, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b Clop \u0443\u0436\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u0443\u044e\u0442 \u043d\u043e\u0432\u0443\u044e \u0438\u0433\u0440\u0443\u0448\u043a\u0443.", "url": "https://t.me/true_secator/5907"}, {"timestamp": "2024-06-28T03:55:12.770Z", "date_only": false, "value": "2024-06-28T03:55:12.770Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-5276", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-28T04:04:27Z", "date_only": false, "value": "2024-06-28T04:04:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/3919", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "e9745a52-5ad0-44d3-bd1c-e90e99bce0e1", "content": "\u200aCVE-2024-5276 (CVSS 9.8): Critical SQLi Flaw in Fortra FileCatalyst Workflow, PoC Available\n\nhttps://securityonline.info/cve-2024-5276-cvss-9-8-critical-sqli-flaw-in-fortra-filecatalyst-workflow-poc-available/", "url": "https://t.me/HackingInsights/3919"}, {"timestamp": "2024-08-01T21:11:12.427Z", "date_only": false, "value": "2024-08-01T21:11:12.427Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-5276", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T21:11:12.427Z", "date_only": false, "value": "2024-08-01T21:11:12.427Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-5276", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-19T08:40:02Z", "date_only": false, "value": "2024-08-19T08:40:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/fortra_filecatalyst_workflow_sqli.rb", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "bd84ea7e-ad71-4251-9ec5-fd91ffa1f86e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/fortra_filecatalyst_workflow_sqli.rb"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "04d16cee-0ff3-4be8-811f-7c07a86c6394"}, {"timestamp": "2025-02-23T04:11:05Z", "date_only": false, "value": "2025-02-23T04:11:05.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "a9e326f8-7b62-4aa0-b2c2-949cb39e2c1b"}, {"timestamp": "2025-04-05T00:30:25Z", "date_only": false, "value": "2025-04-05T00:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MGCV-6R68-PW73", "record": "GHSA-MGCV-6R68-PW73", "field": "modified"}, {"timestamp": "2025-10-18T21:02:30.965Z", "date_only": false, "value": "2025-10-18T21:02:30.965653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3iophhaaa2p", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "fc2bf6a3-1e0f-4efc-9d2c-b44dc6201c8a", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3iophhaaa2p"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "0c804a3e-2b98-4f74-927d-0f52d6fd5f61"}, {"timestamp": "2026-06-17T08:15:35.763Z", "date_only": false, "value": "2026-06-17T08:15:35.763", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-5276", "record": "FKIE_CVE-2024-5276", "field": "lastModified"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2024-5276", "field": "timestamps.asserted_at", "uuid": "535e017a-ff78-466b-b085-9f1800943233", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2024-5276", "field": "evidence.0.details.added_date", "uuid": "535e017a-ff78-466b-b085-9f1800943233", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2024-5276", "field": "timestamps.first_seen_at", "uuid": "535e017a-ff78-466b-b085-9f1800943233", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": false, "value": "2026-09-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2024-5276", "field": "status.status_updated_at", "uuid": "535e017a-ff78-466b-b085-9f1800943233", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T10:09:39Z", "date_only": false, "value": "2026-09-10T10:09:39+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-5276", "field": "timestamps.asserted_at", "uuid": "3ba638f3-e574-4a6d-9fc3-23602dd5c513", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T10:09:39Z", "date_only": false, "value": "2026-09-10T10:09:39+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-5276", "field": "timestamps.first_seen_at", "uuid": "3ba638f3-e574-4a6d-9fc3-23602dd5c513", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T11:00:01Z", "date_only": false, "value": "2026-09-11T11:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2024-5276", "field": "timestamps.recorded_at", "uuid": "535e017a-ff78-466b-b085-9f1800943233", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-11T11:00:41.602Z", "date_only": false, "value": "2026-09-11T11:00:41.602492Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/535e017a-ff78-466b-b085-9f1800943233", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "ae96013a-e110-44fc-8ee4-a7c248cbe17f", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/535e017a-ff78-466b-b085-9f1800943233"}, {"timestamp": "2026-09-11T11:00:41.808Z", "date_only": false, "value": "2026-09-11T11:00:41.808369Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/84284bc6-6c26-4cb6-8ca4-2c70c58af4dc", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "7b0a06ea-93c5-4ee0-a520-11e52e4c7fd2", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/84284bc6-6c26-4cb6-8ca4-2c70c58af4dc"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-5276", "field": "timestamps.last_seen_at", "uuid": "3ba638f3-e574-4a6d-9fc3-23602dd5c513", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-5276", "field": "evidence.0.details.observation_date", "uuid": "3ba638f3-e574-4a6d-9fc3-23602dd5c513", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-5276", "field": "status.status_updated_at", "uuid": "3ba638f3-e574-4a6d-9fc3-23602dd5c513", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:12:04.270Z", "date_only": false, "value": "2026-10-21T09:12:04.270991Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3ba638f3-e574-4a6d-9fc3-23602dd5c513", "record": "CVE-2024-5276", "field": "creation_timestamp", "uuid": "25567d8c-bff5-4f22-8460-226b5df62a9e", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3ba638f3-e574-4a6d-9fc3-23602dd5c513"}, {"timestamp": "2026-10-22T01:00:02Z", "date_only": false, "value": "2026-10-22T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-5276", "field": "timestamps.recorded_at", "uuid": "3ba638f3-e574-4a6d-9fc3-23602dd5c513", "status": {"status_reason": "confirmed", "exploited": true}}]}