{"metadata": {"vulnerability": "cve-2024-24837", "count": 21, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 11}}, "data": [{"timestamp": "2024-01-31T18:26:14.723Z", "date_only": false, "value": "2024-01-31T18:26:14.723Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-24837", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-01T06:02:24.259Z", "date_only": false, "value": "2024-02-01T06:02:24.259890Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-24837", "record": "GSD-2024-24837", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-02-21T07:18:55.035Z", "date_only": false, "value": "2024-02-21T07:18:55.035Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-24837", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-02-21T08:15:46Z", "date_only": false, "value": "2024-02-21T08:15:46Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-578W-FVQ5-3WC2", "record": "GHSA-578W-FVQ5-3WC2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-02-21T08:15:46.277Z", "date_only": false, "value": "2024-02-21T08:15:46.277", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-24837", "record": "FKIE_CVE-2024-24837", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-02-21T08:15:46.277Z", "date_only": false, "value": "2024-02-21T08:15:46.277", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-24837", "record": "GSD-2024-24837", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2024-02-21T09:21:32Z", "date_only": false, "value": "2024-02-21T09:21:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/189384", "record": "CVE-2024-24837", "field": "creation_timestamp", "uuid": "c88c36aa-af3b-456c-a986-52fe2e3054a6", "content": "https://ift.tt/NPxMs21\nCVE-2024-24837", "url": "https://t.me/ctinow/189384"}, {"timestamp": "2024-02-21T09:27:01Z", "date_only": false, "value": "2024-02-21T09:27:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/189390", "record": "CVE-2024-24837", "field": "creation_timestamp", "uuid": "9bb3a4da-77f9-472f-b0c8-eb6a6902560c", "content": "https://ift.tt/NPxMs21\nCVE-2024-24837", "url": "https://t.me/ctinow/189390"}, {"timestamp": "2024-02-21T09:31:01Z", "date_only": false, "value": "2024-02-21T09:31:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-578W-FVQ5-3WC2", "record": "GHSA-578W-FVQ5-3WC2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-02-21T16:47:11.481Z", "date_only": false, "value": "2024-02-21T16:47:11.481597Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-24837", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-02-21T16:47:11.481Z", "date_only": false, "value": "2024-02-21T16:47:11.481597Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-24837", "record": "FKIE_CVE-2024-24837", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-02-22T04:33:59Z", "date_only": false, "value": "2024-02-22T04:33:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3936", "record": "CVE-2024-24837", "field": "creation_timestamp", "uuid": "93b93ce8-34a0-4219-9962-2756ee84690e", "content": "#ExploitObserverAlert\n\nCVE-2024-24837\n\nDESCRIPTION: Exploit Observer has 2 entries in 1 file formats related to CVE-2024-24837. Cross-Site Request Forgery (CSRF) vulnerability in Fr\u00e9d\u00e9ric GILLES FG PrestaShop to WooCommerce, Fr\u00e9d\u00e9ric GILLES FG Drupal to WordPress, Fr\u00e9d\u00e9ric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; FG Joomla to WordPress: from n/a through 4.15.0.\n\nFIRST-EPSS: 0.000450000", "url": "https://t.me/arpsyndicate/3936"}, {"timestamp": "2024-02-22T19:07:27.197Z", "date_only": false, "value": "2024-02-22T19:07:27.197", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-24837", "record": "GSD-2024-24837", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-02-29T11:27:03Z", "date_only": false, "value": "2024-02-29T11:27:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/196522", "record": "CVE-2024-24837", "field": "creation_timestamp", "uuid": "50628659-9642-43ce-9762-ec0189c8f4cc", "content": "https://ift.tt/oI8ZhR7\nCVE-2024-24837 | FG Drupal Plugin up to 3.67.0 on WordPress ajax_importer cross-site request forgery", "url": "https://t.me/ctinow/196522"}, {"timestamp": "2024-08-01T23:28:12.997Z", "date_only": false, "value": "2024-08-01T23:28:12.997Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-24837", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-22T16:24:05.124Z", "date_only": false, "value": "2025-04-22T16:24:05.124Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-24837", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-22T17:03:29Z", "date_only": false, "value": "2025-04-22T17:03:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12905", "record": "CVE-2024-24837", "field": "creation_timestamp", "uuid": "62c99688-c85b-4dd6-94bf-05be8d4f5dae", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-24837\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Fr\u00e9d\u00e9ric GILLES FG PrestaShop to WooCommerce, Fr\u00e9d\u00e9ric GILLES FG Drupal to WordPress, Fr\u00e9d\u00e9ric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; FG Joomla to WordPress: from n/a through 4.15.0.\n\n\n\ud83d\udccf Published: 2024-02-21T07:18:55.035Z\n\ud83d\udccf Modified: 2025-04-22T16:24:05.124Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/fg-drupal-to-wp/wordpress-fg-drupal-to-wordpress-plugin-3-67-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve\n2. https://patchstack.com/database/vulnerability/fg-prestashop-to-woocommerce/wordpress-fg-prestashop-to-woocommerce-plugin-4-44-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve\n3. https://patchstack.com/database/vulnerability/fg-joomla-to-wordpress/wordpress-fg-joomla-to-wordpress-plugin-4-15-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "url": "https://t.me/DarkWebInformer_CVEAlerts/12905"}, {"timestamp": "2026-04-28T16:09:10.704Z", "date_only": false, "value": "2026-04-28T16:09:10.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-24837", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-28T16:09:10.704Z", "date_only": false, "value": "2026-04-28T16:09:10.704Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Patchstack", "record": "cve-2024-24837", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-28T21:33:59Z", "date_only": false, "value": "2026-04-28T21:33:59Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-578W-FVQ5-3WC2", "record": "GHSA-578W-FVQ5-3WC2", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T07:14:59.193Z", "date_only": false, "value": "2026-06-17T07:14:59.193", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-24837", "record": "FKIE_CVE-2024-24837", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-15T14:12:48.880Z", "anchors": {"origin": {"timestamp": "2024-02-21T07:18:55.035Z", "date_only": false, "value": "2024-02-21T07:18:55.035Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-24837", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-02-21T07:18:55.035Z", "date_only": false, "value": "2024-02-21T07:18:55.035Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-24837", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 86252033.845199, "hours": 23958.898290333058, "days": 998.2874287638774, "min_seconds": 86252033.845199, "max_seconds": 86252033.845199, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-02-21T07:18:55.035Z", "date_only": false, "value": "2024-02-21T07:18:55.035Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-24837", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T14:12:48.880Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}