{"metadata": {"vulnerability": "cve-2024-25712", "count": 17, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2024-02-11T00:00:00Z", "date_only": false, "value": "2024-02-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-25712", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-02-11T00:00:00Z", "date_only": false, "value": "2024-02-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-25712", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-02-11T01:52:57.534Z", "date_only": false, "value": "2024-02-11T01:52:57.534Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2024-25712", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-02-11T06:03:34.209Z", "date_only": false, "value": "2024-02-11T06:03:34.209778Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-25712", "record": "GSD-2024-25712", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-29T01:44:16Z", "date_only": false, "value": "2024-02-29T01:44:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-49W7-5R33-JM9M", "record": "GHSA-49W7-5R33-JM9M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-02-29T01:44:16.287Z", "date_only": false, "value": "2024-02-29T01:44:16.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-25712", "record": "FKIE_CVE-2024-25712", "field": "published"}, {"timestamp": "2024-02-29T01:44:16.287Z", "date_only": false, "value": "2024-02-29T01:44:16.287", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-25712", "record": "GSD-2024-25712", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-02-29T03:33:18Z", "date_only": false, "value": "2024-02-29T03:33:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-49W7-5R33-JM9M", "record": "GHSA-49W7-5R33-JM9M", "field": "published"}, {"timestamp": "2024-02-29T13:49:29.390Z", "date_only": false, "value": "2024-02-29T13:49:29.390", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-25712", "record": "GSD-2024-25712", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-29T20:18:05.878Z", "date_only": false, "value": "2024-02-29T20:18:05.878763Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-25712", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-02-29T20:18:05.878Z", "date_only": false, "value": "2024-02-29T20:18:05.878763Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-25712", "record": "FKIE_CVE-2024-25712", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-01T23:52:06.417Z", "date_only": false, "value": "2024-08-01T23:52:06.417Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-25712", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-16T19:57:08Z", "date_only": false, "value": "2025-01-16T19:57:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-49W7-5R33-JM9M", "record": "GHSA-49W7-5R33-JM9M", "field": "modified"}, {"timestamp": "2025-06-16T18:20:18.592Z", "date_only": false, "value": "2025-06-16T18:20:18.592Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-25712", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-16T18:20:18.592Z", "date_only": false, "value": "2025-06-16T18:20:18.592Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-25712", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-16T18:38:39Z", "date_only": false, "value": "2025-06-16T18:38:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18491", "record": "CVE-2024-25712", "field": "creation_timestamp", "uuid": "198faeb9-9344-4c1f-b5f2-a5818b97fcbb", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-25712\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: http-swagger before 1.2.6 allows XSS via PUT requests, because a file that has been uploaded (via httpSwagger.WrapHandler and *webdav.memFile) can subsequently be accessed via a GET request. NOTE: this is independently fixable with respect to CVE-2022-24863, because (if a solution continued to allow PUT requests) large files could have been blocked without blocking JavaScript, or JavaScript could have been blocked without blocking large files.\n\ud83d\udccf Published: 2024-02-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-16T18:20:18.592Z\n\ud83d\udd17 References:\n1. https://cosmosofcyberspace.github.io/improper_http_method_leads_to_xss/poc.html\n2. https://github.com/swaggo/http-swagger/releases/tag/v1.2.6", "url": "https://t.me/DarkWebInformer_CVEAlerts/18491"}, {"timestamp": "2026-06-17T07:16:27.340Z", "date_only": false, "value": "2026-06-17T07:16:27.340", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-25712", "record": "FKIE_CVE-2024-25712", "field": "lastModified"}]}
