{"metadata": {"vulnerability": "CVE-2024-54151", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2024-11-29T18:02:16.756Z", "date_only": false, "value": "2024-11-29T18:02:16.756Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-54151", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-12-09T14:47:46Z", "date_only": false, "value": "2024-12-09T14:47:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/directus/directus/security/advisories/GHSA-849r-qrwj-8rv4", "record": "CVE-2024-54151", "field": "creation_timestamp", "uuid": "f3933b4b-da47-481b-a98d-2c0ffbd6be7a", "url": "https://github.com/directus/directus/security/advisories/GHSA-849r-qrwj-8rv4"}, {"timestamp": "2024-12-09T20:40:54Z", "date_only": false, "value": "2024-12-09T20:40:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-849R-QRWJ-8RV4", "record": "GHSA-849R-QRWJ-8RV4", "field": "published"}, {"timestamp": "2024-12-09T20:57:28.365Z", "date_only": false, "value": "2024-12-09T20:57:28.365Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-54151", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-12-09T20:57:28.365Z", "date_only": false, "value": "2024-12-09T20:57:28.365Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-54151", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-09T20:59:45.968Z", "date_only": false, "value": "2024-12-09T20:59:45.968405Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113624874055932705", "record": "CVE-2024-54151", "field": "creation_timestamp", "uuid": "55b549f3-63f3-4156-b5c3-eb59042e8646", "url": "https://infosec.exchange/users/cve/statuses/113624874055932705"}, {"timestamp": "2024-12-09T21:15:08Z", "date_only": false, "value": "2024-12-09T21:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-849R-QRWJ-8RV4", "record": "GHSA-849R-QRWJ-8RV4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-12-09T21:15:08.753Z", "date_only": false, "value": "2024-12-09T21:15:08.753", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-54151", "record": "FKIE_CVE-2024-54151", "field": "published"}, {"timestamp": "2024-12-09T21:54:13Z", "date_only": false, "value": "2024-12-09T21:54:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-849R-QRWJ-8RV4", "record": "GHSA-849R-QRWJ-8RV4", "field": "modified"}, {"timestamp": "2024-12-09T23:04:29Z", "date_only": false, "value": "2024-12-09T23:04:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/12450", "record": "CVE-2024-54151", "field": "creation_timestamp", "uuid": "4fb5b028-a930-495c-8d60-de6dbbfd1a40", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-54151 - Directus Unauthenticated Administrative Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-54151 \nPublished : Dec. 9, 2024, 9:15 p.m. | 37\u00a0minutes ago \nDescription : Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting `WEBSOCKETS_GRAPHQL_AUTH` or `WEBSOCKETS_REST_AUTH` to \"public\", an unauthenticated user is able to do any of the supported operations (CRUD, subscriptions) with full admin privileges. This impacts any Directus instance that has either `WEBSOCKETS_GRAPHQL_AUTH` or `WEBSOCKETS_REST_AUTH` set to `public` allowing unauthenticated users to subscribe for changes on any collection or do REST CRUD operations on user defined collections ignoring permissions. Version 11.3.0 fixes the issue. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/12450"}, {"timestamp": "2024-12-10T16:10:28.432Z", "date_only": false, "value": "2024-12-10T16:10:28.432315Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-54151", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-12-10T16:10:28.432Z", "date_only": false, "value": "2024-12-10T16:10:28.432315Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-54151", "record": "FKIE_CVE-2024-54151", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-10T17:09:06.417Z", "date_only": false, "value": "2024-12-10T17:09:06.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-54151", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-12-10T17:09:06.417Z", "date_only": false, "value": "2024-12-10T17:09:06.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-54151", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:09:51.933Z", "date_only": false, "value": "2026-06-17T08:09:51.933", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-54151", "record": "FKIE_CVE-2024-54151", "field": "lastModified"}]}