{"metadata": {"vulnerability": "cve-2024-13919", "count": 35, "kinds": {"milestone": 7, "sighting": 13, "kev": 0, "other": 15}}, "data": [{"timestamp": "2024-12-17T00:00:00Z", "date_only": true, "value": "2024-12-17", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0238", "record": "CERTFR-2025-AVI-0238", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2025-03-04T18:11:39.565Z", "date_only": false, "value": "2025-03-04T18:11:39.565Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-13919", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-10T10:03:01.374Z", "date_only": false, "value": "2025-03-10T10:03:01.374Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-13919", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-10T10:03:01.374Z", "date_only": false, "value": "2025-03-10T10:03:01.374Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sba-research", "record": "cve-2024-13919", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-10T10:15:13Z", "date_only": false, "value": "2025-03-10T10:15:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-83WP-F5C3-HQQR", "record": "GHSA-83WP-F5C3-HQQR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-03-10T10:15:13.890Z", "date_only": false, "value": "2025-03-10T10:15:13.890", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13919", "record": "FKIE_CVE-2024-13919", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-10T10:39:28Z", "date_only": false, "value": "2025-03-10T10:39:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6988", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "2fe967db-064a-4c20-85aa-3b68b1019ed6", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13919\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.\n\ud83d\udccf Published: 2025-03-10T10:03:01.374Z\n\ud83d\udccf Modified: 2025-03-10T10:03:01.374Z\n\ud83d\udd17 References:\n1. https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-02_Laravel_Reflected_XSS_via_Route_Parameter_in_Debug-Mode_Error_Page\n2. https://github.com/laravel/framework/pull/53869\n3. https://github.com/laravel/framework/releases/tag/v11.36.0", "url": "https://t.me/DarkWebInformer_CVEAlerts/6988", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-10T11:48:30.540Z", "date_only": false, "value": "2025-03-10T11:48:30.540855Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114137976660008505", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "2785d827-39dc-4da3-9d61-97c12116c791", "url": "https://mastodon.social/users/CyberSignaler/statuses/114137976660008505"}, {"timestamp": "2025-03-10T12:20:52Z", "date_only": false, "value": "2025-03-10T12:20:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19943", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "4048f8c2-4f58-4e22-a54c-6be60342caa0", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-13919 - Laravel Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2024-13919 \nPublished : March 10, 2025, 10:15 a.m. | 53\u00a0minutes ago \nDescription : The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19943"}, {"timestamp": "2025-03-10T12:30:55Z", "date_only": false, "value": "2025-03-10T12:30:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-83WP-F5C3-HQQR", "record": "GHSA-83WP-F5C3-HQQR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-10T12:38:06.695Z", "date_only": false, "value": "2025-03-10T12:38:06.695003Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-13919", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-10T12:38:06.695Z", "date_only": false, "value": "2025-03-10T12:38:06.695003Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13919", "record": "FKIE_CVE-2024-13919", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-10T12:41:35.550Z", "date_only": false, "value": "2025-03-10T12:41:35.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-13919", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-10T12:54:42.725Z", "date_only": false, "value": "2025-03-10T12:54:42.725185Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzlwwntpk2w", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "a3881b93-3ec8-4b9e-b6df-ea56f3170a1a", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3ljzlwwntpk2w"}, {"timestamp": "2025-03-10T13:16:58.243Z", "date_only": false, "value": "2025-03-10T13:16:58.243622Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114138324497059173", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "ea02c510-f11b-4c19-876e-a0ea78d7b9fb", "url": "https://infosec.exchange/users/cR0w/statuses/114138324497059173"}, {"timestamp": "2025-03-10T14:45:05Z", "date_only": false, "value": "2025-03-10T14:45:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iW8U3_nMoxaA79vuYKZZgyqiJjioPLHROfNeLhYnQIpOw7Q5", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "e90e7680-dcc4-40cc-8cb7-f246afa99922"}, {"timestamp": "2025-03-10T14:59:34.205Z", "date_only": false, "value": "2025-03-10T14:59:34.205520Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljzsw6soxq2x", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "ba0a6623-745c-4c96-b9bc-6a3c2028d530", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljzsw6soxq2x"}, {"timestamp": "2025-03-10T17:02:42.335Z", "date_only": false, "value": "2025-03-10T17:02:42.335Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-13919", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-10T17:02:42.335Z", "date_only": false, "value": "2025-03-10T17:02:42.335Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-13919", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-10T23:00:00Z", "date_only": false, "value": "2025-03-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0520", "record": "WID-SEC-W-2025-0520", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-03-10T23:00:00Z", "date_only": false, "value": "2025-03-10T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0520", "record": "WID-SEC-W-2025-0520", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-10T23:00:00Z", "date_only": false, "value": "2025-03-10T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0520", "record": "WID-SEC-W-2025-0520", "field": "vulnerabilities.1.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-10T23:00:00Z", "date_only": false, "value": "2025-03-10T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0520", "record": "WID-SEC-W-2025-0520", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-03-11T11:10:17.385Z", "date_only": false, "value": "2025-03-11T11:10:17.385+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0520", "record": "WID-SEC-W-2025-0520", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2025-03-14T20:28:58Z", "date_only": false, "value": "2025-03-14T20:28:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-83WP-F5C3-HQQR", "record": "GHSA-83WP-F5C3-HQQR", "field": "modified", "linked_record": true}, {"timestamp": "2025-03-17T03:58:58.517Z", "date_only": false, "value": "2025-03-17T03:58:58.517747Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lkkbbbtrf22o", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "4b19fe59-8968-42d4-aaa3-ee850d5af261", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lkkbbbtrf22o"}, {"timestamp": "2025-03-17T07:50:24.409Z", "date_only": false, "value": "2025-03-17T07:50:24.409368Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lkko762css2c", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "4433e113-b298-4da7-a307-6afcd7883521", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3lkko762css2c"}, {"timestamp": "2025-03-17T12:43:30Z", "date_only": false, "value": "2025-03-17T12:43:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/2668", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "27c2937c-c388-4c81-b35c-edfd9e29f1ec", "content": "\u26a1Laravel Framework Vulnerable to Reflected XSS Attacks (CVE-2024-13918 & CVE-2024-13919).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2668"}, {"timestamp": "2025-03-18T01:14:07.675Z", "date_only": false, "value": "2025-03-18T01:14:07.675954Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lkmijhmog22f", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "a1852abc-031e-40e0-9494-76decc27c7e5", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lkmijhmog22f"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0238", "record": "CERTFR-2025-AVI-0238", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0238", "record": "CERTFR-2025-AVI-0238", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0238", "record": "CERTFR-2025-AVI-0238", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-06-17T07:02:59.537Z", "date_only": false, "value": "2026-06-17T07:02:59.537", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-13919", "record": "FKIE_CVE-2024-13919", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-04T13:00:06.278Z", "date_only": false, "value": "2026-08-04T13:00:06.278280Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/380", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "64d5ce55-b775-42d0-a3a0-791114b6595d", "url": "https://t.me/purp_sec/380"}, {"timestamp": "2026-08-05T00:00:31.818Z", "date_only": false, "value": "2026-08-05T00:00:31.818692Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/380", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "d6db55f7-249e-4323-afa3-6146b29b2397", "url": "https://t.me/purp_sec/380"}], "metrics": {"as_of": "2026-11-14T05:59:26.661Z", "anchors": {"origin": {"timestamp": "2025-03-10T10:03:01.374Z", "date_only": false, "value": "2025-03-10T10:03:01.374Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-13919", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-10T10:03:01.374Z", "date_only": false, "value": "2025-03-10T10:03:01.374Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-13919", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-03-10T10:39:28Z", "date_only": false, "value": "2025-03-10T10:39:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6988", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "2fe967db-064a-4c20-85aa-3b68b1019ed6", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13919\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.\n\ud83d\udccf Published: 2025-03-10T10:03:01.374Z\n\ud83d\udccf Modified: 2025-03-10T10:03:01.374Z\n\ud83d\udd17 References:\n1. https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-02_Laravel_Reflected_XSS_via_Route_Parameter_in_Debug-Mode_Error_Page\n2. https://github.com/laravel/framework/pull/53869\n3. https://github.com/laravel/framework/releases/tag/v11.36.0", "url": "https://t.me/DarkWebInformer_CVEAlerts/6988", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 2186.626, "hours": 0.6073961111111111, "days": 0.025308171296296297, "min_seconds": 2186.626, "max_seconds": 2186.626, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-10T10:03:01.374Z", "date_only": false, "value": "2025-03-10T10:03:01.374Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-13919", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-10T10:39:28Z", "date_only": false, "value": "2025-03-10T10:39:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6988", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "2fe967db-064a-4c20-85aa-3b68b1019ed6", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13919\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.\n\ud83d\udccf Published: 2025-03-10T10:03:01.374Z\n\ud83d\udccf Modified: 2025-03-10T10:03:01.374Z\n\ud83d\udd17 References:\n1. https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-02_Laravel_Reflected_XSS_via_Route_Parameter_in_Debug-Mode_Error_Page\n2. https://github.com/laravel/framework/pull/53869\n3. https://github.com/laravel/framework/releases/tag/v11.36.0", "url": "https://t.me/DarkWebInformer_CVEAlerts/6988", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 53034985.287816, "hours": 14731.940357726668, "days": 613.8308482386111, "min_seconds": 53034985.287816, "max_seconds": 53034985.287816, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-10T10:03:01.374Z", "date_only": false, "value": "2025-03-10T10:03:01.374Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-13919", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T05:59:26.661Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 53032798.661816, "hours": 14731.332961615555, "days": 613.8055400673148, "min_seconds": 53032798.661816, "max_seconds": 53032798.661816, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-10T10:39:28Z", "date_only": false, "value": "2025-03-10T10:39:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6988", "record": "CVE-2024-13919", "field": "creation_timestamp", "uuid": "2fe967db-064a-4c20-85aa-3b68b1019ed6", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-13919\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.\n\ud83d\udccf Published: 2025-03-10T10:03:01.374Z\n\ud83d\udccf Modified: 2025-03-10T10:03:01.374Z\n\ud83d\udd17 References:\n1. https://github.com/sbaresearch/advisories/tree/public/2024/SBA-ADV-20241209-02_Laravel_Reflected_XSS_via_Route_Parameter_in_Debug-Mode_Error_Page\n2. https://github.com/laravel/framework/pull/53869\n3. https://github.com/laravel/framework/releases/tag/v11.36.0", "url": "https://t.me/DarkWebInformer_CVEAlerts/6988", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T05:59:26.661Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}