{"metadata": {"vulnerability": "GHSA-R64R-5H43-26QV", "count": 13, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 7}}, "data": [{"timestamp": "2024-01-19T00:18:53.234Z", "date_only": false, "value": "2024-01-19T00:18:53.234Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-23649", "record": "CVE-2024-23649", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-01-24T18:09:30.401Z", "date_only": false, "value": "2024-01-24T18:09:30.401Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-23649", "record": "CVE-2024-23649", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-24T18:09:30.401Z", "date_only": false, "value": "2024-01-24T18:09:30.401Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23649 / GitHub_M", "record": "CVE-2024-23649", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-24T18:15:09Z", "date_only": false, "value": "2024-01-24T18:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-R64R-5H43-26QV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-24T21:13:39Z", "date_only": false, "value": "2024-01-24T21:13:39Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-R64R-5H43-26QV", "field": "published"}, {"timestamp": "2024-01-24T21:13:39Z", "date_only": false, "value": "2024-01-24T21:13:39Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-R64R-5H43-26QV", "field": "modified"}, {"timestamp": "2024-01-24T22:27:17Z", "date_only": false, "value": "2024-01-24T22:27:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/173128", "record": "GHSA-R64R-5H43-26QV", "field": "creation_timestamp", "uuid": "0e52a7aa-63d9-4f65-b010-48c07c1f7e35", "content": "https://ift.tt/RkJ4mO0\n[GHSA-r64r-5h43-26qv] Any authenticated user may obtain private message details from other users on the same instance", "url": "https://t.me/ctinow/173128"}, {"timestamp": "2024-01-26T20:37:12Z", "date_only": false, "value": "2024-01-26T20:37:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3064", "record": "GHSA-R64R-5H43-26QV", "field": "creation_timestamp", "uuid": "8425f1f3-1446-4f13-b7f2-bbb09c3cc3b4", "content": "#ExploitObserverAlert\n\nGHSA-r64r-5h43-26qv\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to GHSA-r64r-5h43-26qv. Users can report private messages, even when they're neither sender nor recipient of the message. The API response to creating a private message report contains the private message itself, which means any user can just iterate over message ids to (loudly) obtain all private messages of an instance. A user with instance admin privileges can also abuse this if the private message is removed from the response, as they're able to see the resulting reports.", "url": "https://t.me/arpsyndicate/3064"}, {"timestamp": "2024-02-18T10:48:47Z", "date_only": false, "value": "2024-02-18T10:48:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/187208", "record": "GHSA-R64R-5H43-26QV", "field": "creation_timestamp", "uuid": "07cf16c1-6d98-453d-9af9-4d7118d0328b", "content": "https://ift.tt/O8e5BYC\nCVE-2024-23649 | Lemmy up to 0.19.0 API report improper authorization (GHSA-r64r-5h43-26qv)", "url": "https://t.me/ctinow/187208"}, {"timestamp": "2024-08-01T23:06:25.335Z", "date_only": false, "value": "2024-08-01T23:06:25.335Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23649 / CVE", "record": "CVE-2024-23649", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T15:42:46.679Z", "date_only": false, "value": "2025-05-08T15:42:46.679129Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-23649 / CISA-ADP", "record": "CVE-2024-23649", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-30T14:16:25.819Z", "date_only": false, "value": "2025-05-30T14:16:25.819Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23649", "record": "CVE-2024-23649", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-30T14:16:25.819Z", "date_only": false, "value": "2025-05-30T14:16:25.819Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23649 / CISA-ADP", "record": "CVE-2024-23649", "field": "containers.adp.1.providerMetadata.dateUpdated"}]}