{"metadata": {"vulnerability": "CVE-2024-54037", "count": 25, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 17}}, "data": [{"timestamp": "2024-11-27T16:21:41.942Z", "date_only": false, "value": "2024-11-27T16:21:41.942Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-54037", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-12-10T17:00:00Z", "date_only": false, "value": "2024-12-10T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2024-54037", "field": "containers.cna.datePublic"}, {"timestamp": "2024-12-10T20:42:18.680Z", "date_only": false, "value": "2024-12-10T20:42:18.680Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-54037", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-12-10T21:15:21Z", "date_only": false, "value": "2024-12-10T21:15:21Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-96HH-C9FQ-9C4X", "record": "GHSA-96HH-C9FQ-9C4X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-12-10T21:15:21.080Z", "date_only": false, "value": "2024-12-10T21:15:21.080", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-54037", "record": "FKIE_CVE-2024-54037", "field": "published"}, {"timestamp": "2024-12-10T21:30:53Z", "date_only": false, "value": "2024-12-10T21:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-96HH-C9FQ-9C4X", "record": "GHSA-96HH-C9FQ-9C4X", "field": "published"}, {"timestamp": "2024-12-10T21:30:53Z", "date_only": false, "value": "2024-12-10T21:30:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-96HH-C9FQ-9C4X", "record": "GHSA-96HH-C9FQ-9C4X", "field": "modified"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3677", "record": "WID-SEC-W-2024-3677", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3677", "record": "WID-SEC-W-2024-3677", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3677", "record": "WID-SEC-W-2024-3677", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-12-10T23:00:00Z", "date_only": false, "value": "2024-12-10T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3677", "record": "WID-SEC-W-2024-3677", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-10T23:20:48Z", "date_only": false, "value": "2024-12-10T23:20:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/12584", "record": "CVE-2024-54037", "field": "creation_timestamp", "uuid": "c5951ff2-25fe-4d53-8a01-605b654d1509", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-54037 - Adobe Connect DOM-based Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-54037 \nPublished : Dec. 10, 2024, 9:15 p.m. | 45\u00a0minutes ago \nDescription : Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, the attacker can inject malicious scripts that run when the page is rendered. This type of attack requires user interaction, as the victim would need to visit a malicious link or input data into a compromised form. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/12584"}, {"timestamp": "2024-12-11T08:46:09.788Z", "date_only": false, "value": "2024-12-11T08:46:09.788540Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0483", "record": "NCSC-2024-0483", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-11T08:46:09.788Z", "date_only": false, "value": "2024-12-11T08:46:09.788540Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0483", "record": "NCSC-2024-0483", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-12-11T08:46:09.788Z", "date_only": false, "value": "2024-12-11T08:46:09.788540Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0483", "record": "NCSC-2024-0483", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-11T12:11:57.545Z", "date_only": false, "value": "2024-12-11T12:11:57.545+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-3677", "record": "WID-SEC-W-2024-3677", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-13T00:00:00Z", "date_only": true, "value": "2024-12-13", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-02842", "record": "CNVD-2025-02842", "field": "submitTime"}, {"timestamp": "2024-12-16T00:00:00Z", "date_only": false, "value": "2024-12-16T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-54037", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-12-16T00:00:00Z", "date_only": false, "value": "2024-12-16T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-54037", "record": "FKIE_CVE-2024-54037", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-17T04:55:52.290Z", "date_only": false, "value": "2024-12-17T04:55:52.290Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-54037", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-14T23:09:50Z", "date_only": false, "value": "2025-01-14T23:09:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1641", "record": "CVE-2024-54037", "field": "creation_timestamp", "uuid": "a1149c1f-93e0-462c-813e-661fd3f25007", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-54037\n\ud83d\udd39 Description: Adobe Connect versions 12.6, 11.4.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the victim's browser session. By manipulating a DOM element through a crafted URL or user input, the high-privileged attacker can inject malicious scripts that run when the page is rendered. This type of attack requires user interaction, as the victim would need to visit a malicious link or input data into a compromised form. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. This attack is dependent on the victim allowing all popups, increasing the attack complexity.\n\ud83d\udccf Published: 2024-12-10T20:42:18.680Z\n\ud83d\udccf Modified: 2025-01-14T22:01:32.503Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/connect/apsb24-99.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/1641"}, {"timestamp": "2025-01-16T17:33:20.838Z", "date_only": false, "value": "2025-01-16T17:33:20.838Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-54037", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-16T17:33:20.838Z", "date_only": false, "value": "2025-01-16T17:33:20.838Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2024-54037", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-11T00:00:00Z", "date_only": true, "value": "2025-02-11", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-02842", "record": "CNVD-2025-02842", "field": "openTime"}, {"timestamp": "2026-06-17T08:09:42.673Z", "date_only": false, "value": "2026-06-17T08:09:42.673", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-54037", "record": "FKIE_CVE-2024-54037", "field": "lastModified"}]}