{"metadata": {"vulnerability": "GHSA-23c8-4wwr-g3c6", "count": 7, "kinds": {"milestone": 0, "sighting": 7, "kev": 0, "other": 0}}, "data": [{"timestamp": "2025-01-28T22:35:34.770Z", "date_only": false, "value": "2025-01-28T22:35:34.770994Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113908366252655454", "record": "GHSA-23c8-4wwr-g3c6", "field": "creation_timestamp", "uuid": "434b2208-90df-46a2-80c7-dc630440de14", "url": "https://infosec.exchange/users/cve/statuses/113908366252655454"}, {"timestamp": "2025-01-29T01:10:14Z", "date_only": false, "value": "2025-01-29T01:10:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3331", "record": "GHSA-23C8-4WWR-G3C6", "field": "creation_timestamp", "uuid": "25547faf-b546-4e32-8e8b-bd3b9af5be15", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-56529\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Mailcow through 2024-11b has a session fixation vulnerability in the web panel. It allows remote attackers to set a session identifier when HSTS is disabled on a victim's browser. After a user logs in, they are authenticated and the session identifier is valid. Then, a remote attacker can access the victim's web panel with the same session identifier.\n\ud83d\udccf Published: 2025-01-29T00:31:54Z\n\ud83d\udccf Modified: 2025-01-29T00:31:54Z\n\ud83d\udd17 References:\n1. https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-23c8-4wwr-g3c6\n2. https://nvd.nist.gov/vuln/detail/CVE-2024-56529", "url": "https://t.me/DarkWebInformer_CVEAlerts/3331"}, {"timestamp": "2025-04-01T12:36:32Z", "date_only": false, "value": "2025-04-01T12:36:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/suboxone_chatroom/7394", "record": "GHSA-23C8-4WWR-G3C6", "field": "creation_timestamp", "uuid": "33356afe-0248-4dbc-a404-50891fbe7ef2", "content": "CVE-2024-56529: Session Fixation in Mailcow, 7.5 rating\u2757\ufe0f\n\nThe application does not disable old session IDs, which allows a remote attacker to use existing IDs in the victim's browser.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/AuyJw\n\ud83d\udc49 Dork: http.title:\"mailcow UI\"\n\nVendor's advisory: https://github.com/mailcow/mailcow-dockerized/security/advisories/GHSA-23c8-4wwr-g3c6", "url": "https://t.me/suboxone_chatroom/7394"}, {"timestamp": "2026-07-09T03:00:09.761Z", "date_only": false, "value": "2026-07-09T03:00:09.761895Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1466", "record": "GHSA-23C8-4WWR-G3C6", "field": "creation_timestamp", "uuid": "8398e79b-95f0-4c23-8ec4-86e379bfbc65", "url": "https://t.me/brutsecurity/1466"}, {"timestamp": "2026-07-10T00:00:33.424Z", "date_only": false, "value": "2026-07-10T00:00:33.424674Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1466", "record": "GHSA-23C8-4WWR-G3C6", "field": "creation_timestamp", "uuid": "99fbcdc3-b549-46f1-8a56-4169ab399c29", "url": "https://t.me/brutsecurity/1466"}, {"timestamp": "2026-07-11T15:00:05.699Z", "date_only": false, "value": "2026-07-11T15:00:05.699421Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1466", "record": "GHSA-23C8-4WWR-G3C6", "field": "creation_timestamp", "uuid": "b79cbb88-e71b-42ed-b504-438c64608cb9", "url": "https://t.me/brutsecurity/1466"}, {"timestamp": "2026-07-12T00:00:47.426Z", "date_only": false, "value": "2026-07-12T00:00:47.426347Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1466", "record": "GHSA-23C8-4WWR-G3C6", "field": "creation_timestamp", "uuid": "f45de638-0eaf-40c4-87fd-d862981ddf03", "url": "https://t.me/brutsecurity/1466"}]}