{"metadata": {"vulnerability": "cve-2024-42350", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2024-07-30T14:01:33.922Z", "date_only": false, "value": "2024-07-30T14:01:33.922Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-42350", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-05T19:47:44.903Z", "date_only": false, "value": "2024-08-05T19:47:44.903Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-42350", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-05T19:47:44.903Z", "date_only": false, "value": "2024-08-05T19:47:44.903Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-42350", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-05T20:15:36.697Z", "date_only": false, "value": "2024-08-05T20:15:36.697", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-42350", "record": "FKIE_CVE-2024-42350", "field": "published"}, {"timestamp": "2024-08-05T20:23:26.079Z", "date_only": false, "value": "2024-08-05T20:23:26.079868Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-42350", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-05T20:23:26.079Z", "date_only": false, "value": "2024-08-05T20:23:26.079868Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-42350", "record": "FKIE_CVE-2024-42350", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-05T20:23:35.031Z", "date_only": false, "value": "2024-08-05T20:23:35.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-42350", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-05T20:23:35.031Z", "date_only": false, "value": "2024-08-05T20:23:35.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-42350", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-05T23:06:41Z", "date_only": false, "value": "2024-08-05T23:06:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/2487", "record": "CVE-2024-42350", "field": "creation_timestamp", "uuid": "c3fc0282-4877-46fe-9478-29fe72e4c9ef", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-42350 - Biscuit Third-Party Block Request Forgery Unauthorized Key Trusting\", \n  \"Content\": \"CVE ID : CVE-2024-42350 \nPublished : Aug. 5, 2024, 8:15 p.m. | 38\u00a0minutes ago \nDescription : Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language. Third-party blocks can be generated without transferring the whole token to the third-party authority. Instead, a `ThirdPartyBlock` request can be sent, providing only the necessary info to generate a third-party block and to sign it: 1. the public key of the previous block (used in the signature), 2. the public keys part of the token symbol table (for public key interning in datalog expressions). A third-part block request forged by a malicious user can trick the third-party authority into generating datalog trusting the wrong keypair. Tokens with third-party blocks containing `trusted` annotations generated through a third party block request. This has been addressed in version 4 of the specification. Users are advised to update their implementations to conform. There are no known workarounds for this vulnerability. \nSeverity: 3.0 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/2487"}, {"timestamp": "2026-06-17T07:49:18.473Z", "date_only": false, "value": "2026-06-17T07:49:18.473", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-42350", "record": "FKIE_CVE-2024-42350", "field": "lastModified"}]}