{"metadata": {"vulnerability": "cve-2024-42180", "count": 18, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-07-29T21:32:05.157Z", "date_only": false, "value": "2024-07-29T21:32:05.157Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-42180", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-10T16:13:00Z", "date_only": false, "value": "2025-01-10T16:13:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / HCL", "record": "cve-2024-42180", "field": "containers.cna.datePublic"}, {"timestamp": "2025-01-12T21:53:03.369Z", "date_only": false, "value": "2025-01-12T21:53:03.369Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-42180", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-12T21:53:03.369Z", "date_only": false, "value": "2025-01-12T21:53:03.369Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / HCL", "record": "cve-2024-42180", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-12T21:54:19.024Z", "date_only": false, "value": "2025-01-12T21:54:19.024802Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113817607063198957", "record": "CVE-2024-42180", "field": "creation_timestamp", "uuid": "f0aedec4-5d72-413f-b96c-c79092951369", "url": "https://infosec.exchange/users/cve/statuses/113817607063198957"}, {"timestamp": "2025-01-12T22:05:12Z", "date_only": false, "value": "2025-01-12T22:05:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1340", "record": "CVE-2024-42180", "field": "creation_timestamp", "uuid": "8293f0d5-2091-4977-9580-17b5f2c3f5b1", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-42180\n\ud83d\udd39 Description: HCL MyXalytics is affected by a malicious file upload vulnerability.  The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files.\n\ud83d\udccf Published: 2025-01-12T21:53:03.369Z\n\ud83d\udccf Modified: 2025-01-12T21:53:03.369Z\n\ud83d\udd17 References:\n1. https://support.hcl-software.com/csm?id=kb_article&amp;sysparm_article=KB0118149", "url": "https://t.me/DarkWebInformer_CVEAlerts/1340"}, {"timestamp": "2025-01-12T22:15:06Z", "date_only": false, "value": "2025-01-12T22:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9RG3-F299-P33W", "record": "GHSA-9RG3-F299-P33W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-12T22:15:06.983Z", "date_only": false, "value": "2025-01-12T22:15:06.983", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-42180", "record": "FKIE_CVE-2024-42180", "field": "published"}, {"timestamp": "2025-01-12T22:15:28.033Z", "date_only": false, "value": "2025-01-12T22:15:28.033260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lflap62u6w2b", "record": "CVE-2024-42180", "field": "creation_timestamp", "uuid": "ed2a349c-cf2b-4657-9be9-2411b4ffab19", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lflap62u6w2b"}, {"timestamp": "2025-01-12T22:52:42.447Z", "date_only": false, "value": "2025-01-12T22:52:42.447565Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lflcrq65jc2q", "record": "CVE-2024-42180", "field": "creation_timestamp", "uuid": "45a2ab6a-8d96-4735-bb70-f3a446e602f0", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lflcrq65jc2q"}, {"timestamp": "2025-01-13T00:21:10Z", "date_only": false, "value": "2025-01-13T00:21:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/15106", "record": "CVE-2024-42180", "field": "creation_timestamp", "uuid": "ef5eb157-d6a6-4e6b-a069-91d975aeba85", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42180 - HCL MyXalytics File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-42180 \nPublished : Jan. 12, 2025, 10:15 p.m. | 36\u00a0minutes ago \nDescription : HCL MyXalytics is affected by a malicious file upload vulnerability.  The application accepts invalid file uploads, including incorrect content types, double extensions, null bytes, and special characters, allowing attackers to upload and execute malicious files. \nSeverity: 1.6 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/15106"}, {"timestamp": "2025-01-13T00:30:54Z", "date_only": false, "value": "2025-01-13T00:30:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9RG3-F299-P33W", "record": "GHSA-9RG3-F299-P33W", "field": "published"}, {"timestamp": "2025-01-13T00:30:54Z", "date_only": false, "value": "2025-01-13T00:30:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9RG3-F299-P33W", "record": "GHSA-9RG3-F299-P33W", "field": "modified"}, {"timestamp": "2025-01-13T15:13:42.757Z", "date_only": false, "value": "2025-01-13T15:13:42.757185Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-42180", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-13T15:13:42.757Z", "date_only": false, "value": "2025-01-13T15:13:42.757185Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-42180", "record": "FKIE_CVE-2024-42180", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-13T15:14:02.864Z", "date_only": false, "value": "2025-01-13T15:14:02.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-42180", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-13T15:14:02.864Z", "date_only": false, "value": "2025-01-13T15:14:02.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-42180", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T07:48:59.647Z", "date_only": false, "value": "2026-06-17T07:48:59.647", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-42180", "record": "FKIE_CVE-2024-42180", "field": "lastModified"}]}
