{"metadata": {"vulnerability": "cve-2022-24342", "count": 23, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 11}}, "data": [{"timestamp": "2022-02-02T00:00:00Z", "date_only": false, "value": "2022-02-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-24342", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-25T14:35:48Z", "date_only": false, "value": "2022-02-25T14:35:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24342", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-02-25T14:35:48Z", "date_only": false, "value": "2022-02-25T14:35:48.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-24342", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-02-25T15:15:00Z", "date_only": false, "value": "2022-02-25T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F63F-Q8V2-C4G8", "record": "GHSA-F63F-Q8V2-C4G8", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-02-25T15:15:00Z", "date_only": false, "value": "2022-02-25T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-24342", "record": "GSD-2022-24342", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-02-25T15:15:10.540Z", "date_only": false, "value": "2022-02-25T15:15:10.540", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24342", "record": "FKIE_CVE-2022-24342", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-02-25T18:21:20Z", "date_only": false, "value": "2022-02-25T18:21:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/38108", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "5163e7fc-bbe3-4c57-ad8e-2cf5068acdd2", "content": "\u203c CVE-2022-24342 \u203c\n\nIn JetBrains TeamCity before 2021.2.1, URL injection leading to CSRF was possible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/38108"}, {"timestamp": "2022-02-26T00:00:42Z", "date_only": false, "value": "2022-02-26T00:00:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F63F-Q8V2-C4G8", "record": "GHSA-F63F-Q8V2-C4G8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-03-01T00:00:00Z", "date_only": true, "value": "2022-03-01", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-15945", "record": "CNVD-2022-15945", "field": "submitTime", "linked_record": true}, {"timestamp": "2022-03-02T00:00:00Z", "date_only": true, "value": "2022-03-02", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-15945", "record": "CNVD-2022-15945", "field": "openTime", "linked_record": true}, {"timestamp": "2022-03-04T02:33:00Z", "date_only": false, "value": "2022-03-04T02:33Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-24342", "record": "GSD-2022-24342", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-03-05T00:00:54Z", "date_only": false, "value": "2022-03-05T00:00:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F63F-Q8V2-C4G8", "record": "GHSA-F63F-Q8V2-C4G8", "field": "modified", "linked_record": true}, {"timestamp": "2022-07-02T22:47:20Z", "date_only": false, "value": "2022-07-02T22:47:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2627", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "16e3607f-e435-4af7-ab85-ee9d50f609fe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication\nURL\uff1ahttps://github.com/yuriisanin/CVE-2022-24342\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2627", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-07-03T06:33:56Z", "date_only": false, "value": "2022-07-03T06:33:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2198", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "d5dd1eba-ca76-4b9a-8c67-1f262e819dda", "content": "#CVE-2022\n\nPoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication\n\nhttps://github.com/yuriisanin/CVE-2022-24342\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2198", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-07-04T10:35:33Z", "date_only": false, "value": "2022-07-04T10:35:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/903", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "743e9cea-0e37-4785-9b59-92c9ba299006", "content": "CVE-2022-24342\nJetBrains TeamCity - account takeover via CSRF in GitHub authentication (PoC exploit)\n\u0421\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043d\u0435\u043c\u043e\u0435 \u043a\u0438\u043d\u043e \u0442\u0443\u0442\n\n#cve #poc", "url": "https://t.me/proxy_bar/903", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-07-04T16:35:34Z", "date_only": false, "value": "2022-07-04T16:35:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fdGFZ2gHKmG2voL4zAoI2grAco9RuTEEk8kCLVh8z6GA7A", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "830e5410-697f-4a0d-822b-2d910aecbb05", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-07-04T20:48:01Z", "date_only": false, "value": "2022-07-04T20:48:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1315", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "919028cb-227d-4751-8433-5f5fce92fd39", "content": "CVE-2022-24342 account takeover via CSRF\n\n#CVE-2022-24342 #vulnerability #GitHub #CSRF #Exploit\n#CyberSecurity #BugBountry #Hacking #OSINT #Pentest\n\nhttps://reconshell.com/cve-2022-24342-account-takeover-via-csrf/", "url": "https://t.me/reconshell/1315", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-07-05T06:24:51Z", "date_only": false, "value": "2022-07-05T06:24:51.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/k8m3X8YhQhkrr48KHoFrxNHe2bYjefr1euD_m-0TzPewCA", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "10f84c3a-5be0-407e-b48a-310fd6fec6af"}, {"timestamp": "2022-07-05T14:02:24Z", "date_only": false, "value": "2022-07-05T14:02:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/796", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "db848cc5-2654-4f2f-b461-4ce34c1ffb7b", "content": "Today's Update\n1. nday exploit: netgear orbi unauthenticated command injection (CVE-2020-27861)\n2. Collection of Exploits, CVES(Unauthenticated) and Wordpress Scanners\n3. CVE-2022-24706 exploit\n4. Androguard Tool - Reverse engineering and pentesting of Android applications.\n5. Amsi-Bypass-Powershell Scripts\n6. Bug-Bounty-Tips\n7. nacs - Event-driven pentest scanner\n8. Malaysia locatefamily Data leak\n9. Jaeles \u2013 The Swiss Army knife for automated Web Application Testing\n10. D(COM) V(ulnerability) S(canner) AKA Devious swiss army knife \u2013 Lateral movement using DCOM Objects\n11. Pak Military Garments Company Data dump Video\n12. CVE-2022-24342 - JetBrains TeamCity \u2013 account takeover via CSRF in GitHub authentication (PoC)\n\nLink:- https://forum.hackbyte.org", "url": "https://t.me/crackcodes/796"}, {"timestamp": "2023-12-13T01:19:43.253Z", "date_only": false, "value": "2023-12-13T01:19:43.253313Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24342", "record": "GSD-2022-24342", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-03T04:07:02.341Z", "date_only": false, "value": "2024-08-03T04:07:02.341Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-24342", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T04:07:02.341Z", "date_only": false, "value": "2024-08-03T04:07:02.341Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-24342", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:31:39.317Z", "date_only": false, "value": "2026-06-17T04:31:39.317", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24342", "record": "FKIE_CVE-2022-24342", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T08:23:36.856Z", "anchors": {"origin": {"timestamp": "2022-02-25T14:35:48Z", "date_only": false, "value": "2022-02-25T14:35:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24342", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-02-25T14:35:48Z", "date_only": false, "value": "2022-02-25T14:35:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24342", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-07-02T22:47:20Z", "date_only": false, "value": "2022-07-02T22:47:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2627", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "16e3607f-e435-4af7-ab85-ee9d50f609fe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication\nURL\uff1ahttps://github.com/yuriisanin/CVE-2022-24342\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2627", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 11002292.0, "hours": 3056.1922222222224, "days": 127.3413425925926, "min_seconds": 11002292.0, "max_seconds": 11002292.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-02-25T14:35:48Z", "date_only": false, "value": "2022-02-25T14:35:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24342", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-07-02T22:47:20Z", "date_only": false, "value": "2022-07-02T22:47:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2627", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "16e3607f-e435-4af7-ab85-ee9d50f609fe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication\nURL\uff1ahttps://github.com/yuriisanin/CVE-2022-24342\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2627", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 148758468.85686, "hours": 41321.79690468334, "days": 1721.741537695139, "min_seconds": 148758468.85686, "max_seconds": 148758468.85686, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-02-25T14:35:48Z", "date_only": false, "value": "2022-02-25T14:35:48.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24342", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T08:23:36.856Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 137756176.85686, "hours": 38265.60468246111, "days": 1594.4001951025464, "min_seconds": 137756176.85686, "max_seconds": 137756176.85686, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-02T22:47:20Z", "date_only": false, "value": "2022-07-02T22:47:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2627", "record": "CVE-2022-24342", "field": "creation_timestamp", "uuid": "16e3607f-e435-4af7-ab85-ee9d50f609fe", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-24342: account takeover via CSRF in GitHub authentication\nURL\uff1ahttps://github.com/yuriisanin/CVE-2022-24342\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2627", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T08:23:36.856Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}