{"metadata": {"vulnerability": "cve-2024-49753", "count": 29, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 21}}, "data": [{"timestamp": "2024-10-18T13:43:23.451Z", "date_only": false, "value": "2024-10-18T13:43:23.451Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-49753", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-25T14:11:44.092Z", "date_only": false, "value": "2024-10-25T14:11:44.092Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-49753", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-25T14:11:44.092Z", "date_only": false, "value": "2024-10-25T14:11:44.092Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-49753", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-25T14:15:12Z", "date_only": false, "value": "2024-10-25T14:15:12Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6CF5-W9H3-4RQV", "record": "GHSA-6CF5-W9H3-4RQV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-25T14:15:12.280Z", "date_only": false, "value": "2024-10-25T14:15:12.280", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-49753", "record": "FKIE_CVE-2024-49753", "field": "published"}, {"timestamp": "2024-10-25T15:04:29.564Z", "date_only": false, "value": "2024-10-25T15:04:29.564973Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-49753", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-25T15:04:29.564Z", "date_only": false, "value": "2024-10-25T15:04:29.564973Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-49753", "record": "FKIE_CVE-2024-49753", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-25T16:17:38.587Z", "date_only": false, "value": "2024-10-25T16:17:38.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-49753", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-25T16:17:38.587Z", "date_only": false, "value": "2024-10-25T16:17:38.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-49753", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-25T17:05:04Z", "date_only": false, "value": "2024-10-25T17:05:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/8947", "record": "CVE-2024-49753", "field": "creation_timestamp", "uuid": "1199d5c7-a912-4ff8-8668-328c1a733dfb", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49753 - Zitadel DNS Bypass Localhost Escalation\", \n  \"Content\": \"CVE ID : CVE-2024-49753 \nPublished : Oct. 25, 2024, 2:15 p.m. | 39\u00a0minutes ago \nDescription : Zitadel is open-source identity infrastructure software. Versions prior to 2.64.1, 2.63.6, 2.62.8, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 have a flaw in the URL validation mechanism of Zitadel actions allows bypassing restrictions intended to block requests to localhost (127.0.0.1). The isHostBlocked check, designed to prevent such requests, can be circumvented by creating a DNS record that resolves to 127.0.0.1. This enables actions to send requests to localhost despite the intended security measures. This vulnerability potentially allows unauthorized access to unsecured internal endpoints, which may contain sensitive information or functionalities. Versions 2.64.1, 2.63.6, 2.62.8, 2.61.4, 2.60.4, 2.59.5, and 2.58.7 contain a patch. No known workarounds are available. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/8947"}, {"timestamp": "2024-10-25T19:29:20Z", "date_only": false, "value": "2024-10-25T19:29:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6CF5-W9H3-4RQV", "record": "GHSA-6CF5-W9H3-4RQV", "field": "published"}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-01T00:00:00Z", "date_only": false, "value": "2024-11-01T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-05T07:45:02Z", "date_only": false, "value": "2024-11-05T07:45:02Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2024:3911-1", "record": "SUSE-SU-2024:3911-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-05T14:52:20Z", "date_only": false, "value": "2024-11-05T14:52:20Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0350-1", "record": "OPENSUSE-SU-2024:0350-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-07-09T15:24:53Z", "date_only": false, "value": "2025-07-09T15:24:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6CF5-W9H3-4RQV", "record": "GHSA-6CF5-W9H3-4RQV", "field": "modified"}, {"timestamp": "2026-06-17T08:00:23.030Z", "date_only": false, "value": "2026-06-17T08:00:23.030", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-49753", "record": "FKIE_CVE-2024-49753", "field": "lastModified"}, {"timestamp": "2026-09-20T21:20:06Z", "date_only": false, "value": "2026-09-20T21:20:06Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:20:06Z", "date_only": false, "value": "2026-09-20T21:20:06Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14447-1", "record": "OPENSUSE-SU-2024:14447-1", "field": "document.tracking.current_release_date"}]}