{"metadata": {"vulnerability": "cve-2024-34342", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-05-02T06:36:32.436Z", "date_only": false, "value": "2024-05-02T06:36:32.436Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-34342", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-05-07T14:29:06.599Z", "date_only": false, "value": "2024-05-07T14:29:06.599Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-34342", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-05-07T14:29:06.599Z", "date_only": false, "value": "2024-05-07T14:29:06.599Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-34342", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-05-07T15:15:09Z", "date_only": false, "value": "2024-05-07T15:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-87HQ-Q4GP-9WR4", "record": "GHSA-87HQ-Q4GP-9WR4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-05-07T15:15:09.730Z", "date_only": false, "value": "2024-05-07T15:15:09.730", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34342", "record": "FKIE_CVE-2024-34342", "field": "published"}, {"timestamp": "2024-05-07T16:48:59Z", "date_only": false, "value": "2024-05-07T16:48:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-87HQ-Q4GP-9WR4", "record": "GHSA-87HQ-Q4GP-9WR4", "field": "published"}, {"timestamp": "2024-05-07T18:55:02.356Z", "date_only": false, "value": "2024-05-07T18:55:02.356516Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-34342", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-05-07T18:55:02.356Z", "date_only": false, "value": "2024-05-07T18:55:02.356516Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34342", "record": "FKIE_CVE-2024-34342", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-05-08T11:25:59Z", "date_only": false, "value": "2024-05-08T11:25:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/173", "record": "CVE-2024-34342", "field": "creation_timestamp", "uuid": "0a42d558-31ff-4046-a18c-e746819bedda", "content": "\u200aCVE-2024-4367 & CVE-2024-34342: JavaScript Flaws Threaten Millions of PDF.js and React-PDF Users\n\nhttps://securityonline.info/cve-2024-4367-cve-2024-34342-javascript-flaw-threatens-millions-of-pdf-js-and-react-pdf-users/", "url": "https://t.me/HackingInsights/173"}, {"timestamp": "2024-05-21T10:36:42Z", "date_only": false, "value": "2024-05-21T10:36:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/390", "record": "CVE-2024-34342", "field": "creation_timestamp", "uuid": "88c8c8e3-9b7c-47f0-aaac-e5f84e1db949", "content": "\ud83d\udea8CVE-2024-4367 & CVE-2024-34342: Arbitrary JavaScript execution in PDF.js \n \n \n \n\ud83d\udc49A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. \n \nIf pdf.js is used to load a malicious PDF, and PDF.js is configured with isEvalSupported set to true (which is the default value), unrestricted attacker-controlled JavaScript will be executed in the context of the hosting domain. \n \n \n \n\ud83d\udce2POC: https://www.youtube.com/watch?v=c90_UKJvj_w \n \n\ud83d\udce2POC: https://github.com/LOURC0D3/CVE-2024-4367-PoC", "url": "https://t.me/brutsecurity/390"}, {"timestamp": "2024-05-22T18:12:14Z", "date_only": false, "value": "2024-05-22T18:12:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TheDarkWebInformer/368", "record": "CVE-2024-34342", "field": "creation_timestamp", "uuid": "c604e88c-1abf-49d9-a4e7-a299db53b1f0", "content": "\ud83d\udea8POC RELEASED\ud83d\udea8PoC for CVE-2024-4367 & CVE-2024-34342: Arbitrary JavaScript execution in PDF.js\n\n#DarkWeb #Cybersecurity #Security #Cyberattack #Cybercrime #Privacy #Infosec #CVE20244367 #CVE202434342 #Vulnerability \n\nhttps://x.com/DarkWebInformer/status/1793295146588459283", "url": "https://t.me/TheDarkWebInformer/368"}, {"timestamp": "2024-05-29T22:12:45Z", "date_only": false, "value": "2024-05-29T22:12:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-87HQ-Q4GP-9WR4", "record": "GHSA-87HQ-Q4GP-9WR4", "field": "modified"}, {"timestamp": "2024-06-04T17:42:26.586Z", "date_only": false, "value": "2024-06-04T17:42:26.586Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-34342", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T02:51:10.948Z", "date_only": false, "value": "2024-08-02T02:51:10.948Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-34342", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T02:51:10.948Z", "date_only": false, "value": "2024-08-02T02:51:10.948Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2024-34342", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:33:12.770Z", "date_only": false, "value": "2026-06-17T07:33:12.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-34342", "record": "FKIE_CVE-2024-34342", "field": "lastModified"}]}