{"metadata": {"vulnerability": "cve-2024-45309", "count": 38, "kinds": {"milestone": 3, "sighting": 18, "kev": 11, "other": 6}}, "data": [{"timestamp": "2024-08-26T18:25:35.444Z", "date_only": false, "value": "2024-08-26T18:25:35.444Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-45309", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-21T14:55:18.293Z", "date_only": false, "value": "2024-10-21T14:55:18.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-45309", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-10-21T14:55:18.293Z", "date_only": false, "value": "2024-10-21T14:55:18.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-45309", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-21T15:15:03.463Z", "date_only": false, "value": "2024-10-21T15:15:03.463", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45309", "record": "FKIE_CVE-2024-45309", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-10-21T17:41:24Z", "date_only": false, "value": "2024-10-21T17:41:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8499", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "de3a8d6c-09e9-4d1d-89a9-007800f78acb", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45309 - OneDev Path Traversal File Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45309 \nPublished : Oct. 21, 2024, 3:15 p.m. | 23\u00a0minutes ago \nDescription : OneDev is a Git server with CI/CD, kanban, and packages. A vulnerability in versions prior to 11.0.9 allows unauthenticated users to read arbitrary files accessible by the OneDev server process. This issue has been fixed in version 11.0.9. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8499"}, {"timestamp": "2024-10-21T19:15:51.587Z", "date_only": false, "value": "2024-10-21T19:15:51.587051Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-45309", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-21T19:15:51.587Z", "date_only": false, "value": "2024-10-21T19:15:51.587051Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45309", "record": "FKIE_CVE-2024-45309", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-10-21T19:16:02.326Z", "date_only": false, "value": "2024-10-21T19:16:02.326Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-45309", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-21T19:16:02.326Z", "date_only": false, "value": "2024-10-21T19:16:02.326Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-45309", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-22T14:41:58Z", "date_only": false, "value": "2024-10-22T14:41:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/1192", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "27ace543-57e6-49f9-bd98-be9e15a5d001", "content": "\u26a1\ufe0fOneDev DevOps Platform Patches Critical Security Flaw Exposing Sensitive Data \u2013 (CVE-2024-45309).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/1192"}, {"timestamp": "2024-10-22T14:41:58Z", "date_only": false, "value": "2024-10-22T14:41:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/26125", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "6221f13e-bf73-4ca9-a278-4640775228e2", "content": "\u26a1\ufe0fOneDev DevOps Platform Patches Critical Security Flaw Exposing Sensitive Data \u2013 (CVE-2024-45309).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/26125"}, {"timestamp": "2024-10-22T15:06:21Z", "date_only": false, "value": "2024-10-22T15:06:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/24127", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "82bd4008-f6d8-4b5f-ba03-43c4195c8f3f", "content": "\u26a1\ufe0fOneDev DevOps Platform Patches Critical Security Flaw Exposing Sensitive Data \u2013 (CVE-2024-45309).\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/24127"}, {"timestamp": "2024-10-22T15:06:35Z", "date_only": false, "value": "2024-10-22T15:06:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/514", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "9e502843-c382-475d-8c8c-36f6250a291d", "content": "\u26a1\ufe0fOneDev DevOps Platform Patches Critical Security Flaw Exposing Sensitive Data \u2013 (CVE-2024-45309).\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/514"}, {"timestamp": "2025-01-07T03:04:28Z", "date_only": false, "value": "2025-01-07T03:04:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/onedev_arbitrary_file_read.rb", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "a4bc65cd-efae-4505-82ce-b99f4ccb142e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/onedev_arbitrary_file_read.rb"}, {"timestamp": "2025-01-13T10:03:20.678Z", "date_only": false, "value": "2025-01-13T10:03:20.678758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rajsamani.bsky.social/post/3lfmiaw27ps2r", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "983f9660-1323-410c-b2fc-c446d3dbc7db", "url": "https://bsky.app/profile/rajsamani.bsky.social/post/3lfmiaw27ps2r"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "65b573a9-9f11-470a-a223-6d9eb68c2cb8"}, {"timestamp": "2025-02-23T04:11:04Z", "date_only": false, "value": "2025-02-23T04:11:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "5b54df3a-1a39-462c-a822-5fbb5ab677f6"}, {"timestamp": "2025-10-23T21:13:03Z", "date_only": false, "value": "2025-10-23T21:13:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "cccc92dc-612a-42e0-b95a-06994e95a7dd"}, {"timestamp": "2026-05-16T15:14:18Z", "date_only": false, "value": "2026-05-16T15:14:18+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2024-45309", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-16T15:14:18Z", "date_only": false, "value": "2026-05-16T15:14:18+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-45309", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-45309", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "369d4ecc-0da9-4326-a96a-d6c6fc2cb51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-45309", "field": "evidence.0.details.added_date", "uuid": "369d4ecc-0da9-4326-a96a-d6c6fc2cb51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "cb9ef27f-8ab3-479c-93d7-6cd5fcdbbf65", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-45309", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "369d4ecc-0da9-4326-a96a-d6c6fc2cb51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-45309", "field": "status.status_updated_at", "uuid": "369d4ecc-0da9-4326-a96a-d6c6fc2cb51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T07:53:59.890Z", "date_only": false, "value": "2026-06-17T07:53:59.890", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-45309", "record": "FKIE_CVE-2024-45309", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-45309", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "369d4ecc-0da9-4326-a96a-d6c6fc2cb51e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:03.697Z", "date_only": false, "value": "2026-06-19T12:42:03.697511Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/369d4ecc-0da9-4326-a96a-d6c6fc2cb51e", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "b4398060-8e27-4fa7-ad19-e9feed261f85", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/369d4ecc-0da9-4326-a96a-d6c6fc2cb51e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-19T12:45:10.097Z", "date_only": false, "value": "2026-06-19T12:45:10.097605Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edd94049-847e-49a2-b0b0-5bd5e18b6a23", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "724d7b90-b942-40a6-a881-607d99703644", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/edd94049-847e-49a2-b0b0-5bd5e18b6a23", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:03:01.107Z", "date_only": false, "value": "2026-06-23T14:03:01.107667Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ead5d0a7-5978-436a-9e73-16b448508b41", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "3aa84808-3c3d-4b76-85f6-188631ce57e5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ead5d0a7-5978-436a-9e73-16b448508b41", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-25T10:15:24.686Z", "date_only": false, "value": "2026-06-25T10:15:24.686778Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-24)", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "c40fc805-e5e9-4300-95be-b6802dad4b6c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:01.208Z", "date_only": false, "value": "2026-06-30T09:23:01.208012Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/adb7f1ae-7565-44ba-a323-ba33cd9d31fc", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "38ce1ae1-bba7-4cb3-a458-ef49f6367698", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/adb7f1ae-7565-44ba-a323-ba33cd9d31fc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T05:54:08.449Z", "date_only": false, "value": "2026-07-01T05:54:08.449367Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "8e57d989-aaa3-4180-8dae-e4a5213825bc", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-11T21:37:06.669Z", "date_only": false, "value": "2026-07-11T21:37:06.669853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqfmodhwh62m", "record": "CVE-2024-45309", "field": "creation_timestamp", "uuid": "9fa180fe-b280-4be1-aed8-2e0c5f5826c4", "url": "https://bsky.app/profile/cyberhub.blog/post/3mqfmodhwh62m"}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2024-45309", "field": "timestamps.last_seen_at", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": true, "value": "2026-11-04", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2024-45309", "field": "evidence.0.details.observation_date", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T00:00:00Z", "date_only": false, "value": "2026-11-04T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2024-45309", "field": "status.status_updated_at", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-06T01:00:01Z", "date_only": false, "value": "2026-11-06T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2024-45309", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-11T18:33:01.539Z", "anchors": {"origin": {"timestamp": "2024-10-21T14:55:18.293Z", "date_only": false, "value": "2024-10-21T14:55:18.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-45309", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-10-21T14:55:18.293Z", "date_only": false, "value": "2024-10-21T14:55:18.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-45309", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2026-05-16T15:14:18Z", "date_only": false, "value": "2026-05-16T15:14:18+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-45309", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 49421939.707, "hours": 13728.316585277778, "days": 572.0131910532408, "min_seconds": 49421939.707, "max_seconds": 49421939.707, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-21T14:55:18.293Z", "date_only": false, "value": "2024-10-21T14:55:18.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-45309", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-05-16T15:14:18Z", "date_only": false, "value": "2026-05-16T15:14:18+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-45309", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 49421939.707, "hours": 13728.316585277778, "days": 572.0131910532408, "min_seconds": 49421939.707, "max_seconds": 49421939.707, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-21T14:55:18.293Z", "date_only": false, "value": "2024-10-21T14:55:18.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-45309", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-05-16T15:14:18Z", "date_only": false, "value": "2026-05-16T15:14:18+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-45309", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 64899463.246389, "hours": 18027.6286795525, "days": 751.1511949813541, "min_seconds": 64899463.246389, "max_seconds": 64899463.246389, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-10-21T14:55:18.293Z", "date_only": false, "value": "2024-10-21T14:55:18.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-45309", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T18:33:01.539Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 15477523.539389, "hours": 4299.312094274722, "days": 179.13800392811342, "min_seconds": 15477523.539389, "max_seconds": 15477523.539389, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-16T15:14:18Z", "date_only": false, "value": "2026-05-16T15:14:18+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2024-45309", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "7cd2b97f-5b5c-45c2-b132-69f3d1c971f7", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-11T18:33:01.539Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}