{"metadata": {"vulnerability": "cve-2024-2952", "count": 23, "kinds": {"milestone": 8, "sighting": 1, "kev": 0, "other": 14}}, "data": [{"timestamp": "2024-03-26T18:00:46.844Z", "date_only": false, "value": "2024-03-26T18:00:46.844Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-2952", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-04-03T05:02:25.975Z", "date_only": false, "value": "2024-04-03T05:02:25.975891Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-2952", "record": "GSD-2024-2952", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-10T17:07:52.935Z", "date_only": false, "value": "2024-04-10T17:07:52.935Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-2952", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-04-10T17:15:54Z", "date_only": false, "value": "2024-04-10T17:15:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-46CM-PFWV-CGF8", "record": "GHSA-46CM-PFWV-CGF8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-04-10T17:15:54.823Z", "date_only": false, "value": "2024-04-10T17:15:54.823", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2952", "record": "FKIE_CVE-2024-2952", "field": "published"}, {"timestamp": "2024-04-10T17:15:54.823Z", "date_only": false, "value": "2024-04-10T17:15:54.823", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-2952", "record": "GSD-2024-2952", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-04-10T18:30:48Z", "date_only": false, "value": "2024-04-10T18:30:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-46CM-PFWV-CGF8", "record": "GHSA-46CM-PFWV-CGF8", "field": "published"}, {"timestamp": "2024-04-12T08:26:51Z", "date_only": false, "value": "2024-04-12T08:26:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4564", "record": "CVE-2024-2952", "field": "creation_timestamp", "uuid": "405de2fe-30da-480a-b175-ceda49a3d241", "content": "#ExploitObserverAlert\n\nCVE-2024-2952\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-2952. BerriAI/litellm is vulnerable to Server-Side Template Injection (SSTI) via the `/completions` endpoint. The vulnerability arises from the `hf_chat_template` method processing the `chat_template` parameter from the `tokenizer_config.json` file through the Jinja template engine without proper sanitization. Attackers can exploit this by crafting malicious `tokenizer_config.json` files that execute arbitrary code on the server.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.5780347", "url": "https://t.me/arpsyndicate/4564"}, {"timestamp": "2024-04-15T18:15:11.027Z", "date_only": false, "value": "2024-04-15T18:15:11.027", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-2952", "record": "GSD-2024-2952", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-16T11:10:21.535Z", "date_only": false, "value": "2024-04-16T11:10:21.535Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "cve-2024-2952", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-07-03T15:32:17.112Z", "date_only": false, "value": "2024-07-03T15:32:17.112100Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-2952", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-07-03T15:32:17.112Z", "date_only": false, "value": "2024-07-03T15:32:17.112100Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2952", "record": "FKIE_CVE-2024-2952", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-07-03T16:51:12.428Z", "date_only": false, "value": "2024-07-03T16:51:12.428Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-2952", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T19:32:42.587Z", "date_only": false, "value": "2024-08-01T19:32:42.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-2952", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-01T19:32:42.587Z", "date_only": false, "value": "2024-08-01T19:32:42.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-2952", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:25:53.840Z", "date_only": false, "value": "2026-06-17T07:25:53.840", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-2952", "record": "FKIE_CVE-2024-2952", "field": "lastModified"}, {"timestamp": "2026-06-29T11:50:39.562Z", "date_only": false, "value": "2026-06-29T11:50:39.562812Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-387", "record": "PYSEC-2026-387", "field": "published"}, {"timestamp": "2026-07-01T20:22:56.238Z", "date_only": false, "value": "2026-07-01T20:22:56.238364Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-387", "record": "PYSEC-2026-387", "field": "modified"}, {"timestamp": "2026-07-06T14:50:04Z", "date_only": false, "value": "2026-07-06T14:50:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-46CM-PFWV-CGF8", "record": "GHSA-46CM-PFWV-CGF8", "field": "modified"}, {"timestamp": "2026-08-13T16:35:12Z", "date_only": false, "value": "2026-08-13T16:35:12Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2024-2952", "record": "BREW-AIDER-CVE-2024-2952", "field": "published"}, {"timestamp": "2026-08-13T17:32:08Z", "date_only": false, "value": "2026-08-13T17:32:08Z", "kind": "milestone", "label": "Published", "source": "osv_homebrew \u00b7 BREW-RAWDOG-CVE-2024-2952", "record": "BREW-RAWDOG-CVE-2024-2952", "field": "published"}, {"timestamp": "2026-09-09T23:40:56Z", "date_only": false, "value": "2026-09-09T23:40:56Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-AIDER-CVE-2024-2952", "record": "BREW-AIDER-CVE-2024-2952", "field": "modified"}, {"timestamp": "2026-10-13T09:11:26Z", "date_only": false, "value": "2026-10-13T09:11:26Z", "kind": "other", "label": "Updated", "source": "osv_homebrew \u00b7 BREW-RAWDOG-CVE-2024-2952", "record": "BREW-RAWDOG-CVE-2024-2952", "field": "modified"}]}