{"metadata": {"vulnerability": "cve-2024-2928", "count": 22, "kinds": {"milestone": 6, "sighting": 4, "kev": 0, "other": 12}}, "data": [{"timestamp": "2024-03-26T15:36:14.364Z", "date_only": false, "value": "2024-03-26T15:36:14.364Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-2928", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-03T05:02:25.618Z", "date_only": false, "value": "2024-04-03T05:02:25.618153Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-2928", "record": "GSD-2024-2928", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-06T18:29:54.973Z", "date_only": false, "value": "2024-06-06T18:29:54.973Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-2928", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-06-06T18:29:54.973Z", "date_only": false, "value": "2024-06-06T18:29:54.973Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "cve-2024-2928", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-06-06T19:15:55Z", "date_only": false, "value": "2024-06-06T19:15:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J46Q-5PXX-8VMW", "record": "GHSA-J46Q-5PXX-8VMW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-06-06T19:15:55Z", "date_only": false, "value": "2024-06-06T19:15:55+00:00", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2024-242", "record": "PYSEC-2024-242", "field": "published"}, {"timestamp": "2024-06-06T19:15:55.680Z", "date_only": false, "value": "2024-06-06T19:15:55.680", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2928", "record": "FKIE_CVE-2024-2928", "field": "published"}, {"timestamp": "2024-06-06T19:39:18.635Z", "date_only": false, "value": "2024-06-06T19:39:18.635831Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-2928", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-06T19:39:18.635Z", "date_only": false, "value": "2024-06-06T19:39:18.635831Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2928", "record": "FKIE_CVE-2024-2928", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-06T21:30:36Z", "date_only": false, "value": "2024-06-06T21:30:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J46Q-5PXX-8VMW", "record": "GHSA-J46Q-5PXX-8VMW", "field": "published"}, {"timestamp": "2024-07-24T17:23:22.838Z", "date_only": false, "value": "2024-07-24T17:23:22.838Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-2928", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T19:32:42.225Z", "date_only": false, "value": "2024-08-01T19:32:42.225Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-2928", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T19:32:42.225Z", "date_only": false, "value": "2024-08-01T19:32:42.225Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-2928", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-11T17:21:42Z", "date_only": false, "value": "2024-09-11T17:21:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/mlflow_cve_2024_2928", "record": "CVE-2024-2928", "field": "creation_timestamp", "uuid": "33345f80-003e-4440-892c-50641868c166", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/mlflow_cve_2024_2928"}, {"timestamp": "2024-10-13T19:12:13.705Z", "date_only": false, "value": "2024-10-13T19:12:13.705Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2024-2928", "record": "BIT-MLFLOW-2024-2928", "field": "published"}, {"timestamp": "2024-11-08T03:57:04Z", "date_only": false, "value": "2024-11-08T03:57:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8970", "record": "CVE-2024-2928", "field": "creation_timestamp", "uuid": "ec308189-b3ae-44f2-9f47-67fef84a4d2e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aArbitrary file read exploit for CVE-2024-2928 in mlflow \nURL\uff1ahttps://github.com/nuridincersaygili/CVE-2024-2928\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/8970"}, {"timestamp": "2025-04-08T10:23:24.995Z", "date_only": false, "value": "2025-04-08T10:23:24.995743+00:00", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2024-242", "record": "PYSEC-2024-242", "field": "modified"}, {"timestamp": "2025-04-08T22:01:09Z", "date_only": false, "value": "2025-04-08T22:01:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J46Q-5PXX-8VMW", "record": "GHSA-J46Q-5PXX-8VMW", "field": "modified"}, {"timestamp": "2025-05-15T19:12:47Z", "date_only": false, "value": "2025-05-15T19:12:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/53563", "record": "CVE-2024-2928", "field": "creation_timestamp", "uuid": "224d3b62-c4cb-45d8-b709-5dcbcdfcc5a5", "content": "CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation\nhttps://www.offsec.com/blog/cve-2024-2928/\n\nRead about an LFI vulnerability disclosed in MLflow which allowed unauthenticated remote attackers to read arbitrary files by exploiting URI fragments containing directory traversal sequences. \nThe post CVE-2024-2928: MLflow Local File Inclusion via URI Fragment Manipulation (https://www.offsec.com/blog/cve-2024-2928/) appeared first on OffSec (https://www.offsec.com/).", "url": "https://t.me/information_security_channel/53563"}, {"timestamp": "2025-12-09T03:37:09Z", "date_only": false, "value": "2025-12-09T03:37:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kmdOMxkNOmEREjunn-75FtIRjvIZPZNF95d8rgfXMKj0fP8", "record": "CVE-2024-2928", "field": "creation_timestamp", "uuid": "21e486c2-0986-4385-91b2-81428cb2a10f"}, {"timestamp": "2026-06-17T07:25:50.640Z", "date_only": false, "value": "2026-06-17T07:25:50.640", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2928", "record": "FKIE_CVE-2024-2928", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2024-2928", "record": "BIT-MLFLOW-2024-2928", "field": "modified"}]}