{"metadata": {"vulnerability": "cve-2023-24489", "count": 96, "kinds": {"milestone": 6, "sighting": 51, "kev": 17, "other": 22}}, "data": [{"timestamp": "2023-01-24T15:49:52.579Z", "date_only": false, "value": "2023-01-24T15:49:52.579Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-24489", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-06-13T22:00:00Z", "date_only": false, "value": "2023-06-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1457", "record": "WID-SEC-W-2023-1457", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-06-13T22:00:00Z", "date_only": false, "value": "2023-06-13T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1457", "record": "WID-SEC-W-2023-1457", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-06-13T22:00:00Z", "date_only": false, "value": "2023-06-13T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1457", "record": "WID-SEC-W-2023-1457", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0458", "record": "CERTFR-2023-AVI-0458", "field": "last_revision_date"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0458", "record": "CERTFR-2023-AVI-0458", "field": "initial_release_date"}, {"timestamp": "2023-06-14T00:00:00Z", "date_only": false, "value": "2023-06-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0458", "record": "CERTFR-2023-AVI-0458", "field": "revisions.0.revision_date"}, {"timestamp": "2023-07-10T21:11:39.479Z", "date_only": false, "value": "2023-07-10T21:11:39.479Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-24489", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-07-10T21:11:39.479Z", "date_only": false, "value": "2023-07-10T21:11:39.479Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Citrix", "record": "cve-2023-24489", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-07-10T22:15:00Z", "date_only": false, "value": "2023-07-10T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-24489", "record": "GSD-2023-24489", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-07-10T22:15:09Z", "date_only": false, "value": "2023-07-10T22:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-984G-WQFW-H3FH", "record": "GHSA-984G-WQFW-H3FH", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-07-10T22:15:09.197Z", "date_only": false, "value": "2023-07-10T22:15:09.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-24489", "record": "FKIE_CVE-2023-24489", "field": "published"}, {"timestamp": "2023-07-11T00:33:19Z", "date_only": false, "value": "2023-07-11T00:33:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-984G-WQFW-H3FH", "record": "GHSA-984G-WQFW-H3FH", "field": "published"}, {"timestamp": "2023-07-11T02:24:02Z", "date_only": false, "value": "2023-07-11T02:24:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/66316", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "0be44a4c-83cd-4b81-b5ec-ec3c584c155a", "content": "\u203c CVE-2023-24489 \u203c\n\nA vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/66316"}, {"timestamp": "2023-07-11T04:59:28Z", "date_only": false, "value": "2023-07-11T04:59:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/180", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "584fc28a-6d8a-4350-a78f-53a7d079f6a8", "content": "Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)\n\n\ud83d\udc64 by Dylan Pindur\n\nShareFile is cloud-based file sharing and collaboration application. The software providing this feature is a .NET web application running under IIS called \"Storage Zones Controller\" (also sometimes called Storage Center) and this is what Assetnote team decided to target.\nThrough their research they were able to achieve unauthenticated arbitrary file upload and full remote code execution by exploiting a seemingly innocuous cryptographic bug. Citrix has released a security update and assigned this issue CVE-2023-24489.\n\n\ud83d\udcdd Contents:\n\u25cf Introduction\n\u25cf Where to Start?\n\u25cf Authenticated, but Not Really\n\u25cf A Simple Path Traversal\n\u25cf Encryption != Authentication\n\u25cf Block Ciphers and Padding\n\u25cf Cipher Block Chaining\n\u25cf Enough Cryptography, Show Me the Exploit\n\u25cf What Have We Learned?\n\u25cf Conclusions\n\nhttps://blog.assetnote.io/2023/07/04/citrix-sharefile-rce/", "url": "https://t.me/ptswarm/180"}, {"timestamp": "2023-07-11T12:27:02Z", "date_only": false, "value": "2023-07-11T12:27:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/7507", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "602e3648-5991-442f-8859-9f7ff2c131bd", "content": "Advisory: ShareFile Pre-Auth RCE (CVE-2023-24489)\n\nhttps://blog.assetnote.io/2023/07/04/citrix-sharefile-rce-advisory/", "url": "https://t.me/thebugbountyhunter/7507"}, {"timestamp": "2023-07-11T13:03:14Z", "date_only": false, "value": "2023-07-11T13:03:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1618", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "d6fc3836-1f54-49b2-ac98-2043935f15e2", "content": "CVE-2023-24489\nCitrix ShareFile RCE\ud83d\udd25\nPOC exploit + \u0440\u0430\u0437\u0431\u043e\u0440\n\n#citrix", "url": "https://t.me/proxy_bar/1618"}, {"timestamp": "2023-07-11T13:17:20Z", "date_only": false, "value": "2023-07-11T13:17:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3863", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "842c66ca-5152-4697-b26e-8b6662d48832", "content": "CVE-2023-24489\nCitrix ShareFile RCE\ud83d\udd25\nPOC exploit + parsing\n\n#citrix", "url": "https://t.me/crackcodes/3863"}, {"timestamp": "2023-07-11T22:00:00Z", "date_only": false, "value": "2023-07-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1457", "record": "WID-SEC-W-2023-1457", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-07-12T12:27:02Z", "date_only": false, "value": "2023-07-12T12:27:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/7515", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "69447044-7220-4e4a-9a7a-e43cc78368e2", "content": "Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)\n\nhttps://blog.assetnote.io/2023/07/04/citrix-sharefile-rce/", "url": "https://t.me/thebugbountyhunter/7515"}, {"timestamp": "2023-07-18T18:19:00Z", "date_only": false, "value": "2023-07-18T18:19Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-24489", "record": "GSD-2023-24489", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-07-26T03:28:07Z", "date_only": false, "value": "2023-07-26T03:28:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4804", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "00834cd5-8d12-4a72-883b-b4765f9d35d9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-24489 PoC & Exploiter\nURL\uff1ahttps://github.com/codeb0ss/CVE-2023-24489-PoC\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4804"}, {"timestamp": "2023-07-26T06:00:30Z", "date_only": false, "value": "2023-07-26T06:00:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/956", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "ef295581-f09e-4466-8cd7-31d4caf3e3e0", "url": "https://t.me/codeb0ss/956"}, {"timestamp": "2023-07-26T06:00:48Z", "date_only": false, "value": "2023-07-26T06:00:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeb0ss/955", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "009cba38-5a96-4359-8b63-c4fe3450df0b", "content": "CVE-2023-24498 - Remote Code Execution [RCE]\n\nhttps://github.com/codeb0ss/CVE-2023-24489-PoC", "url": "https://t.me/codeb0ss/955"}, {"timestamp": "2023-07-28T16:51:40Z", "date_only": false, "value": "2023-07-28T16:51:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/50356", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "0f0bce45-fabf-4da8-9e17-bf1b9ea2c2bc", "content": "Exploitation of Recent Citrix ShareFile RCE Vulnerability Begins\nhttps://www.securityweek.com/exploitation-of-recent-citrix-sharefile-rce-vulnerability-begins/\n\nThe first attempts to exploit CVE-2023-24489, a recent critical Citrix ShareFile remote code execution vulnerability, have been observed.\nThe post Exploitation of Recent Citrix ShareFile RCE Vulnerability Begins (https://www.securityweek.com/exploitation-of-recent-citrix-sharefile-rce-vulnerability-begins/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/50356"}, {"timestamp": "2023-07-28T22:07:01Z", "date_only": false, "value": "2023-07-28T22:07:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/8751", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "8417e9e2-3706-4a7a-8216-c9f8b08b1cf4", "content": "#exploit\n1. CVE-2022-44666:\nA sample of PoC scripts that run Calc.exe with full source code\nhttps://github.com/arntsonl/calc_security_poc\n]-> https://github.com/j00sean/CVE-2022-44666/tree/main/bypass/jar-poc\n\n2. CVE-2023-24489:\nA Critical Citrix ShareFile RCE Vulnerability\nhttps://blog.assetnote.io/2023/07/04/citrix-sharefile-rce", "url": "https://t.me/CyberSecurityTechnologies/8751"}, {"timestamp": "2023-07-30T08:40:37Z", "date_only": false, "value": "2023-07-30T08:40:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/788", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "adac5677-3033-4953-81ab-5cb488383836", "content": "https://github.com/codeb0ss/CVE-2023-24489-PoC\n#github", "url": "https://t.me/CNArsenal/788"}, {"timestamp": "2023-07-31T10:18:01Z", "date_only": false, "value": "2023-07-31T10:18:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/127202", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "5d672718-f886-43fc-a591-061fdb92daa6", "content": "https://ift.tt/JGb3X7C\nExperts warn attackers started exploiting Citrix ShareFile RCE flaw CVE-2023-24489", "url": "https://t.me/ctinow/127202"}, {"timestamp": "2023-07-31T13:28:44Z", "date_only": false, "value": "2023-07-31T13:28:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3972", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "4447ad00-763a-458a-8f13-05a0306a4516", "content": "\ud83d\udcccXplain AG | Xplain.ch Data Leak : https://system32.ink/xplain-ag-xplain.ch-data-leak/\n\n\ud83d\udcdfCVE-2023-24489 Exploiter [ShareFile RCE]  : https://system32.ink/cve-2023-24489-exploiter-sharefile-rce/\n\n\ud83e\ude85RealChar. \u2013 Your Realtime AI Character : https://system32.ink/realchar.-your-realtime-ai-character/\n\n@Crackcodes | System32.ink | Crackcodes.in", "url": "https://t.me/crackcodes/3972"}, {"timestamp": "2023-08-01T05:27:29Z", "date_only": false, "value": "2023-08-01T05:27:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YAH_Channel/683", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "6ed5f06a-95d8-4f63-bc4a-bb6cc2ee7173", "content": "#infodigest\n\n\u0421\u043e\u0431\u0440\u0430\u043b\u0438 \u0434\u043b\u044f \u0432\u0430\u0441 \u0441\u0430\u043c\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439.\n\n\ud83e\udeb2 Bugs & Exploits\n1. WordPress \u00abWooCommerce Payments\u00bb plugin CVE-2023-28121\n2. Why ORMs and Prepared Statements Can't (Always) Win\n3. Exploiting XSS in hidden inputs and meta tags\n4. Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)\n5. Exploiting Incorrectly Configured Load Balancer with XSS to Steal Cookies\n6. Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646)\n7. Reversing Citrix Gateway for XSS\n8. Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 1)\n9. Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2)\n10. HTML Over the Wire\n\n\ud83d\udee0 Tools\n11. CVSS Advisor (Escalation Techniques)\n12. shortscan\n\n\ud83d\udcd1 Burp extensions & tricks\n13. Improve your API Security Testing with Burp BCheck Scripts\n14. The top 10 community-created BChecks\n\n\ud83d\udcb0 Bug Bounty reports\n15. Bug Writeup: Stored XSS to Account Takeover (ATO) via GraphQL API\n16. Breaking TikTok: Our Journey to Finding an Account Takeover Vulnerability", "url": "https://t.me/YAH_Channel/683"}, {"timestamp": "2023-08-02T15:22:57Z", "date_only": false, "value": "2023-08-02T15:22:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/3043", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "74b68ba3-3f65-4305-8b41-e2c73860ac44", "content": "#infodigest\n\n\u0421\u043e\u0431\u0440\u0430\u043b\u0438 \u0434\u043b\u044f \u0432\u0430\u0441 \u0441\u0430\u043c\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043d\u043e\u0432\u043e\u0441\u0442\u0438 \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 \u043a\u0430\u0442\u0435\u0433\u043e\u0440\u0438\u0439.\n\n\ud83e\udeb2 Bugs & Exploits\n1. WordPress \u00abWooCommerce Payments\u00bb plugin CVE-2023-28121\n2. Why ORMs and Prepared Statements Can't (Always) Win\n3. Exploiting XSS in hidden inputs and meta tags\n4. Encrypted Doesn't Mean Authenticated: ShareFile RCE (CVE-2023-24489)\n5. Exploiting Incorrectly Configured Load Balancer with XSS to Steal Cookies\n6. Chaining our way to Pre-Auth RCE in Metabase (CVE-2023-38646)\n7. Reversing Citrix Gateway for XSS\n8. Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 1)\n9. Analysis of CVE-2023-3519 in Citrix ADC and NetScaler Gateway (Part 2)\n10. HTML Over the Wire\n\n\ud83d\udee0 Tools\n11. CVSS Advisor (Escalation Techniques)\n12. shortscan\n\n\ud83d\udcd1 Burp extensions & tricks\n13. Improve your API Security Testing with Burp BCheck Scripts\n14. The top 10 community-created BChecks\n\n\ud83d\udcb0 Bug Bounty reports\n15. Bug Writeup: Stored XSS to Account Takeover (ATO) via GraphQL API\n16. Breaking TikTok: Our Journey to Finding an Account Takeover Vulnerability", "url": "https://t.me/poxek/3043"}, {"timestamp": "2023-08-03T00:43:50Z", "date_only": false, "value": "2023-08-03T00:43:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/v3n0mhack/267", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "c3105477-0d19-47e0-ad89-e62545eb05d7", "content": "CVE-2023-24489 - Authenticated: ShareFile RCE\nLink : https://github.com/codeb0ss/CVE-2023-24489-PoC", "url": "https://t.me/v3n0mhack/267"}, {"timestamp": "2023-08-14T22:00:00Z", "date_only": false, "value": "2023-08-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1457", "record": "WID-SEC-W-2023-1457", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-08-14T22:00:00Z", "date_only": false, "value": "2023-08-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1457", "record": "WID-SEC-W-2023-1457", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": false, "value": "2023-08-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-24489", "field": "timestamps.asserted_at", "uuid": "43541bba-78df-49cc-9ea1-a90dc1f4e390", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": false, "value": "2023-08-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-24489", "field": "timestamps.asserted_at", "uuid": "5a77f2b6-9389-423a-ba87-5cb8c464a4d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": true, "value": "2023-08-16", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-24489", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": false, "value": "2023-08-16T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-24489", "field": "evidence.0.details.added_date", "uuid": "5a77f2b6-9389-423a-ba87-5cb8c464a4d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": true, "value": "2023-08-16", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-24489", "field": "evidence.0.details.date_added", "uuid": "43541bba-78df-49cc-9ea1-a90dc1f4e390", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": false, "value": "2023-08-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-24489", "field": "timestamps.first_seen_at", "uuid": "43541bba-78df-49cc-9ea1-a90dc1f4e390", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": false, "value": "2023-08-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-24489", "field": "timestamps.first_seen_at", "uuid": "5a77f2b6-9389-423a-ba87-5cb8c464a4d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": false, "value": "2023-08-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-24489", "field": "status.status_updated_at", "uuid": "43541bba-78df-49cc-9ea1-a90dc1f4e390", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": false, "value": "2023-08-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-24489", "field": "status.status_updated_at", "uuid": "5a77f2b6-9389-423a-ba87-5cb8c464a4d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": false, "value": "2023-08-16T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-24489", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-08-16T18:10:02Z", "date_only": false, "value": "2023-08-16T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "fe30730e-f67a-446b-bcd4-87f573da9b8e"}, {"timestamp": "2023-08-16T22:07:36Z", "date_only": false, "value": "2023-08-16T22:07:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/17823", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "cc4e82c8-62b8-4a90-8de0-4e69f38429f5", "content": "Latest news and stories from BleepingComputer.com\nCISA warns of critical Citrix ShareFile flaw exploited in the wild\n\nCISA is warning that a critical Citrix ShareFile secure file transfer vulnerability tracked as CVE-2023-24489 is being targeted by unknown actors\u00a0and has added the flaw to its catalog of known security flaws exploited in the wild. [...]", "url": "https://t.me/BleepingComputer/17823"}, {"timestamp": "2023-08-17T01:05:45Z", "date_only": false, "value": "2023-08-17T01:05:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/17825", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "d106ab68-e2e2-4c83-b393-23fb93b1767f", "content": "\u200aCISA warns of critical Citrix ShareFile flaw exploited in the wild\n\nCISA is warning that a critical Citrix ShareFile secure file transfer vulnerability tracked as CVE-2023-24489 is being targeted by unknown actors\u00a0and has added the flaw to its catalog of known security flaws exploited in the wild. [...]\n\nhttps://www.bleepingcomputer.com/news/security/cisa-warns-of-critical-citrix-sharefile-flaw-exploited-in-the-wild/", "url": "https://t.me/BleepingComputer/17825"}, {"timestamp": "2023-08-17T07:12:49Z", "date_only": false, "value": "2023-08-17T07:12:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/R5cdbEp-3EXwChueiJ8dOMcJ7sUs6Xxmfje-7Je5P_jeQQ", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "82ec2601-cc59-4ef0-b52b-5a0cd99e6ef8"}, {"timestamp": "2023-08-17T07:47:21Z", "date_only": false, "value": "2023-08-17T07:47:21.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/665", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "4e8ea4e5-dc10-43ad-8ec2-31b6cda832c7", "content": "CISA Adds Citrix ShareFile Flaw to KEV Catalog Due to In-the-Wild Attacks\nhttps://thehackernews.com/2023/08/cisa-adds-citrix-sharefile-flaw-to-kev.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw in Citrix ShareFile storage zones controller to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active in-the-wild exploitation.\nTracked as\u00a0CVE-2023-24489\u00a0(CVSS score: 9.8), the shortcoming has been described as an improper access control bug that, if successfully exploited", "url": "https://t.me/KomunitiSiber/665"}, {"timestamp": "2023-08-17T11:55:59Z", "date_only": false, "value": "2023-08-17T11:55:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/50467", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "b6684948-326c-48ab-87e1-7c56cc9bdeb6", "content": "Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning\u00a0\nhttps://www.securityweek.com/exploitation-of-citrix-sharefile-vulnerability-spikes-as-cisa-issues-warning/\n\nExploitation of a Citrix ShareFile vulnerability tracked as CVE-2023-24489 has spiked as CISA added it to its \u2018must patch\u2019 catalog.\nThe post Exploitation of Citrix ShareFile Vulnerability Spikes as CISA Issues Warning\u00a0 (https://www.securityweek.com/exploitation-of-citrix-sharefile-vulnerability-spikes-as-cisa-issues-warning/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/50467"}, {"timestamp": "2023-08-17T13:52:00Z", "date_only": false, "value": "2023-08-17T13:52:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/131149", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "56002f2a-d501-4f0a-80c1-379322bf4ad8", "content": "https://ift.tt/Vh2JgbS\nCitrix ShareFile vulnerability actively exploited (CVE-2023-24489)", "url": "https://t.me/ctinow/131149"}, {"timestamp": "2023-08-17T14:18:36Z", "date_only": false, "value": "2023-08-17T14:18:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3755", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "392c69a1-97bd-41d7-bc9f-99491da51060", "content": "\ud83d\udd75\ufe0f\u200d\u2642\ufe0f Citrix ShareFile under attack! Learn about ongoing exploitation of CVE-2023-24489 and how to defend your systems. \n \nRead now: https://thehackernews.com/2023/08/cisa-adds-citrix-sharefile-flaw-to-kev.html", "url": "https://t.me/thehackernews/3755"}, {"timestamp": "2023-08-18T18:30:30Z", "date_only": false, "value": "2023-08-18T18:30:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/836", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "1a687f36-d4d3-4031-aed1-fdd388e81cef", "content": "CVE-2023-24489 : Citrix ShareFile Storage Zones Controller <=\u00a0 5.11.24 (Citrix Content Collaboration) - Remote Code Execution\nPOC : https://github.com/adhikara13/CVE-2023-24489-ShareFile\nBlog : https://blog.assetnote.io/2023/07/04/citrix-sharefile-rce/", "url": "https://t.me/MrVGunz/836"}, {"timestamp": "2023-08-27T11:57:38Z", "date_only": false, "value": "2023-08-27T11:57:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5003", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "c7d59aa7-39c7-4a87-8818-0d96b6a07f1e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPOC for CVE-2023-24489 with bash. \nURL\uff1ahttps://github.com/whalebone7/CVE-2023-24489-poc\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5003"}, {"timestamp": "2023-09-06T00:00:00Z", "date_only": true, "value": "2023-09-06", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-24489", "field": "evidence.0.details.due_date", "uuid": "43541bba-78df-49cc-9ea1-a90dc1f4e390", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-03T15:19:08Z", "date_only": false, "value": "2023-12-03T15:19:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/964", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "a9d27785-cc76-4a60-bfd1-4266e4f2553b", "content": "#ExploitObserverAlert\n\nCVE-2023-24489\n\nDESCRIPTION: Exploit Observer has 12 entries related to CVE-2023-24489. A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.\n\nFIRST-EPSS: 0.969450000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/964"}, {"timestamp": "2023-12-13T01:20:57.863Z", "date_only": false, "value": "2023-12-13T01:20:57.863622Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-24489", "record": "GSD-2023-24489", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T10:56:04.280Z", "date_only": false, "value": "2024-08-02T10:56:04.280Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-24489", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:52:28.685Z", "date_only": false, "value": "2024-08-15T17:52:28.685+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1457", "record": "WID-SEC-W-2023-1457", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-23T14:39:11Z", "date_only": false, "value": "2024-08-23T14:39:11+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-24489", "field": "timestamps.asserted_at", "uuid": "c3b312f9-1ffa-46eb-b06c-159439fa94a9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-23T14:39:11Z", "date_only": false, "value": "2024-08-23T14:39:11+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-24489", "field": "timestamps.first_seen_at", "uuid": "c3b312f9-1ffa-46eb-b06c-159439fa94a9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-27T00:00:00Z", "date_only": false, "value": "2024-09-27T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-24489", "field": "timestamps.last_seen_at", "uuid": "c3b312f9-1ffa-46eb-b06c-159439fa94a9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-27T00:00:00Z", "date_only": true, "value": "2024-09-27", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-24489", "field": "evidence.0.details.observation_date", "uuid": "c3b312f9-1ffa-46eb-b06c-159439fa94a9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-09-27T00:00:00Z", "date_only": false, "value": "2024-09-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-24489", "field": "status.status_updated_at", "uuid": "c3b312f9-1ffa-46eb-b06c-159439fa94a9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-12-24T20:35:01.612Z", "date_only": false, "value": "2024-12-24T20:35:01.612271Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971868", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "684a3584-dae8-4df5-b460-7b979c83e058", "url": "https://feedsin.space/feed/CISAKevBot/items/2971868"}, {"timestamp": "2025-01-27T22:23:41.107Z", "date_only": false, "value": "2025-01-27T22:23:41.107138Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-24489", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-27T22:23:41.107Z", "date_only": false, "value": "2025-01-27T22:23:41.107138Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-24489", "record": "FKIE_CVE-2023-24489", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:45Z", "date_only": false, "value": "2025-02-23T02:10:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "e1ae758b-7188-415f-8fa6-9ab322084e65"}, {"timestamp": "2025-08-31T03:13:01Z", "date_only": false, "value": "2025-08-31T03:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "312d0309-995a-4196-aecd-ce5130c68c66"}, {"timestamp": "2025-10-21T23:05:43.859Z", "date_only": false, "value": "2025-10-21T23:05:43.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-24489", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:43.859Z", "date_only": false, "value": "2025-10-21T23:05:43.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-24489", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:44Z", "date_only": false, "value": "2025-10-22T00:32:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-984G-WQFW-H3FH", "record": "GHSA-984G-WQFW-H3FH", "field": "modified"}, {"timestamp": "2026-02-02T12:26:53.729Z", "date_only": false, "value": "2026-02-02T12:26:53.729788Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d8e54719-9148-4307-85c1-d6a9c928e79c", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "b587eac2-1823-4e04-84ac-2b0fe0457dcb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d8e54719-9148-4307-85c1-d6a9c928e79c"}, {"timestamp": "2026-02-02T12:26:53.729Z", "date_only": false, "value": "2026-02-02T12:26:53.729788Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d8e54719-9148-4307-85c1-d6a9c928e79c", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "c234cba3-a735-4e07-8488-7834e89b4484", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d8e54719-9148-4307-85c1-d6a9c928e79c"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-24489", "field": "timestamps.recorded_at", "uuid": "43541bba-78df-49cc-9ea1-a90dc1f4e390", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T05:39:22.423Z", "date_only": false, "value": "2026-06-17T05:39:22.423", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-24489", "record": "FKIE_CVE-2023-24489", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:50.441Z", "date_only": false, "value": "2026-06-19T12:46:50.441617Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1528757d-3f6e-42ff-a4ef-59ea7f0f706e", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "1e188015-4045-442d-9b00-a81745ec7479", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1528757d-3f6e-42ff-a4ef-59ea7f0f706e"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-24489", "field": "timestamps.recorded_at", "uuid": "5a77f2b6-9389-423a-ba87-5cb8c464a4d4", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:09.509Z", "date_only": false, "value": "2026-06-23T11:14:09.509670Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5a77f2b6-9389-423a-ba87-5cb8c464a4d4", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "a158b74e-296e-4413-bf30-6bc4b86fbb9a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/5a77f2b6-9389-423a-ba87-5cb8c464a4d4"}, {"timestamp": "2026-06-23T14:05:44.311Z", "date_only": false, "value": "2026-06-23T14:05:44.311247Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/536b30a9-de4a-45e7-ae51-d1fb990000d2", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "f05dbd78-be5f-4732-8e15-4331474bbc7e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/536b30a9-de4a-45e7-ae51-d1fb990000d2"}, {"timestamp": "2026-06-30T12:19:05.269Z", "date_only": false, "value": "2026-06-30T12:19:05.269621Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/43abc17a-1be0-4ba7-b3cd-e5dd937ecb30", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "f8f79693-1767-4335-9b9a-0df82044aa90", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/43abc17a-1be0-4ba7-b3cd-e5dd937ecb30"}, {"timestamp": "2026-07-01T09:12:46.969Z", "date_only": false, "value": "2026-07-01T09:12:46.969564Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c3b312f9-1ffa-46eb-b06c-159439fa94a9", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "c4ef4166-3855-41dc-a36d-f571a614f55c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c3b312f9-1ffa-46eb-b06c-159439fa94a9"}, {"timestamp": "2026-07-01T12:47:07Z", "date_only": false, "value": "2026-07-01T12:47:07+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-24489", "field": "timestamps.recorded_at", "uuid": "c3b312f9-1ffa-46eb-b06c-159439fa94a9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-29T12:00:13.612Z", "date_only": false, "value": "2026-07-29T12:00:13.612820Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17762", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "692ebba1-155a-4561-8834-a8d3366b6117", "url": "https://t.me/CVEhub/17762"}, {"timestamp": "2026-07-29T12:00:13.649Z", "date_only": false, "value": "2026-07-29T12:00:13.649358Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17766", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "b28c70f5-ec1b-42ba-a922-af314d929ef6", "url": "https://t.me/CVEhub/17766"}, {"timestamp": "2026-07-29T12:00:15.809Z", "date_only": false, "value": "2026-07-29T12:00:15.809691Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/16868", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "ae56ce0b-79ba-4e0c-902c-4a5844fc1119", "url": "https://t.me/CVEhub/16868"}, {"timestamp": "2026-07-29T12:02:27.832Z", "date_only": false, "value": "2026-07-29T12:02:27.832457Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3590", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "631b531f-13f9-446f-a2a9-229c10d98205", "url": "https://t.me/reverseame/3590"}, {"timestamp": "2026-07-30T00:00:04.178Z", "date_only": false, "value": "2026-07-30T00:00:04.178288Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/17766", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "13f2c488-0dea-4e70-bddf-0480c5ee8cca", "url": "https://t.me/CVEhub/17766"}, {"timestamp": "2026-07-30T00:00:04.235Z", "date_only": false, "value": "2026-07-30T00:00:04.235448Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/17762", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "6876b87d-9cd7-47c6-b9f8-9eeb81d89695", "url": "https://t.me/CVEhub/17762"}, {"timestamp": "2026-07-30T00:00:35.048Z", "date_only": false, "value": "2026-07-30T00:00:35.048178Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/16868", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "fdb6f953-a661-4169-99e7-27ff26e4e675", "url": "https://t.me/CVEhub/16868"}, {"timestamp": "2026-07-30T00:02:28.755Z", "date_only": false, "value": "2026-07-30T00:02:28.755767Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3590", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "45bc55b6-eca9-4ac9-ad2f-285e0fe3d19a", "url": "https://t.me/reverseame/3590"}, {"timestamp": "2026-07-31T00:00:41.447Z", "date_only": false, "value": "2026-07-31T00:00:41.447754Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/16868", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "2115d3a9-a439-4f4f-b639-4b0fa2e014a6", "url": "https://t.me/CVEhub/16868"}, {"timestamp": "2026-08-02T16:02:14.007Z", "date_only": false, "value": "2026-08-02T16:02:14.007472Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3590", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "962a7b77-ea6b-4041-80e6-8cadc56d6708", "url": "https://t.me/reverseame/3590"}, {"timestamp": "2026-08-03T01:59:19.849Z", "date_only": false, "value": "2026-08-03T01:59:19.849879Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3590", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "08b52b04-ad87-446e-abc6-2821c22fa751", "url": "https://t.me/reverseame/3590"}, {"timestamp": "2026-09-01T17:00:17.875Z", "date_only": false, "value": "2026-09-01T17:00:17.875228Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7120", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "3a785bf5-e334-4576-83ba-2d852faee393", "url": "https://t.me/cissp/7120"}, {"timestamp": "2026-09-09T21:00:05.726Z", "date_only": false, "value": "2026-09-09T21:00:05.726526Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/7120", "record": "CVE-2023-24489", "field": "creation_timestamp", "uuid": "9df3866b-2be7-41ac-a1d1-4da7ad123833", "url": "https://t.me/cissp/7120"}]}