{"metadata": {"vulnerability": "cve-2024-52308", "count": 53, "kinds": {"milestone": 11, "sighting": 4, "kev": 0, "other": 38}}, "data": [{"timestamp": "2024-11-02T00:00:00Z", "date_only": false, "value": "2024-11-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-52308", "record": "MSRC_CVE-2024-52308", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-06T19:00:26.397Z", "date_only": false, "value": "2024-11-06T19:00:26.397Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-52308", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-11-14T17:39:01Z", "date_only": false, "value": "2024-11-14T17:39:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P2H2-3VG9-4P87", "record": "GHSA-P2H2-3VG9-4P87", "field": "published"}, {"timestamp": "2024-11-14T22:55:38.693Z", "date_only": false, "value": "2024-11-14T22:55:38.693Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-52308", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-11-14T23:02:53.499Z", "date_only": false, "value": "2024-11-14T23:02:53.499725Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113483800434488994", "record": "CVE-2024-52308", "field": "creation_timestamp", "uuid": "5c1271a8-9467-4403-b4e6-533ef09f1e9c", "url": "https://infosec.exchange/users/cve/statuses/113483800434488994"}, {"timestamp": "2024-11-14T23:15:00Z", "date_only": false, "value": "2024-11-14T23:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-52308", "record": "UBUNTU-CVE-2024-52308", "field": "published"}, {"timestamp": "2024-11-14T23:15:05Z", "date_only": false, "value": "2024-11-14T23:15:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P2H2-3VG9-4P87", "record": "GHSA-P2H2-3VG9-4P87", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-11-14T23:15:05.727Z", "date_only": false, "value": "2024-11-14T23:15:05.727", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-52308", "record": "FKIE_CVE-2024-52308", "field": "published"}, {"timestamp": "2024-11-15T00:22:11.024Z", "date_only": false, "value": "2024-11-15T00:22:11.024Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2024-52308", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-15T01:02:02Z", "date_only": false, "value": "2024-11-15T01:02:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/11033", "record": "CVE-2024-52308", "field": "creation_timestamp", "uuid": "db209423-6cfb-42d8-a0ac-3f1d571f741b", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-52308 - GitHub CLI Remote Code Execution via Malicious Devcontainer SSH Server\", \n  \"Content\": \"CVE ID : CVE-2024-52308 \nPublished : Nov. 14, 2024, 11:15 p.m. | 38\u00a0minutes ago \nDescription : The GitHub CLI version 2.6.1 and earlier are vulnerable to remote code execution through a malicious codespace SSH server when using `gh codespace ssh` or `gh codespace logs` commands. This has been patched in the cli v2.62.0.  \n  \nDevelopers connect to remote codespaces through an SSH server running within the devcontainer, which is generally provided through the [default devcontainer image](). GitHub CLI [retrieves SSH connection details](), such as remote username, which is used in [executing `ssh` commands]() for `gh codespace ssh` or `gh codespace logs` commands.  \n  \nThis exploit occurs when a malicious third-party devcontainer contains a modified SSH server that injects `ssh` arguments within the SSH connection details. `gh codespace ssh` and `gh codespace logs` commands could execute arbitrary code on the user's workstation if the remote username contains something like `-oProxyCommand=\"echo hacked\" #`.  The `-oProxyCommand` flag causes `ssh` to execute the provided command while `#` shell comment causes any other `ssh` arguments to be ignored.  \n  \nIn `2.62.0`, the remote username information is being validated before being used. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/11033"}, {"timestamp": "2024-11-15T19:31:52.795Z", "date_only": false, "value": "2024-11-15T19:31:52.795141Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-52308", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-15T19:31:52.795Z", "date_only": false, "value": "2024-11-15T19:31:52.795141Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-52308", "record": "FKIE_CVE-2024-52308", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-15T19:33:42.842Z", "date_only": false, "value": "2024-11-15T19:33:42.842Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-52308", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-11-15T19:33:42.842Z", "date_only": false, "value": "2024-11-15T19:33:42.842Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-52308", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14509-1", "record": "OPENSUSE-SU-2024:14509-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14509-1", "record": "OPENSUSE-SU-2024:14509-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14509-1", "record": "OPENSUSE-SU-2024:14509-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-18T00:00:00Z", "date_only": false, "value": "2024-11-18T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14509-1", "record": "OPENSUSE-SU-2024:14509-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-19T15:03:48.421Z", "date_only": false, "value": "2024-11-19T15:03:48.421618Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0454", "record": "NCSC-2024-0454", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-19T15:03:48.421Z", "date_only": false, "value": "2024-11-19T15:03:48.421618Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0454", "record": "NCSC-2024-0454", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-11-19T15:03:48.421Z", "date_only": false, "value": "2024-11-19T15:03:48.421618Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0454", "record": "NCSC-2024-0454", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-11-19T19:37:12Z", "date_only": false, "value": "2024-11-19T19:37:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P2H2-3VG9-4P87", "record": "GHSA-P2H2-3VG9-4P87", "field": "modified"}, {"timestamp": "2024-11-20T00:00:00Z", "date_only": false, "value": "2024-11-20T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14513-1", "record": "OPENSUSE-SU-2024:14513-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-11-20T00:00:00Z", "date_only": false, "value": "2024-11-20T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14513-1", "record": "OPENSUSE-SU-2024:14513-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-11-20T00:00:00Z", "date_only": false, "value": "2024-11-20T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14513-1", "record": "OPENSUSE-SU-2024:14513-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-20T00:00:00Z", "date_only": false, "value": "2024-11-20T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14513-1", "record": "OPENSUSE-SU-2024:14513-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-12-13T00:00:00Z", "date_only": false, "value": "2024-12-13T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-52308", "record": "MSRC_CVE-2024-52308", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-13T00:00:00Z", "date_only": false, "value": "2024-12-13T00:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-52308", "record": "MSRC_CVE-2024-52308", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-01-22T10:02:08Z", "date_only": false, "value": "2025-01-22T10:02:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0021-1", "record": "OPENSUSE-SU-2025:0021-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-22T10:02:08Z", "date_only": false, "value": "2025-01-22T10:02:08Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0021-1", "record": "OPENSUSE-SU-2025:0021-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-01-22T10:02:08Z", "date_only": false, "value": "2025-01-22T10:02:08Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0021-1", "record": "OPENSUSE-SU-2025:0021-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-22T10:02:08Z", "date_only": false, "value": "2025-01-22T10:02:08Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0021-1", "record": "OPENSUSE-SU-2025:0021-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-09-25T00:36:28Z", "date_only": false, "value": "2025-09-25T00:36:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/1c5c38d6-3401-41ac-be0e-4cf361fa6f51", "record": "CVE-2024-52308", "field": "creation_timestamp", "uuid": "b1a52bef-42d3-4fbb-8274-2ff816efb669"}, {"timestamp": "2026-02-04T05:14:52Z", "date_only": false, "value": "2026-02-04T05:14:52Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-52308", "record": "UBUNTU-CVE-2024-52308", "field": "modified"}, {"timestamp": "2026-02-18T14:33:35Z", "date_only": false, "value": "2026-02-18T14:33:35.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-52308", "record": "MSRC_CVE-2024-52308", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-02-18T14:33:35Z", "date_only": false, "value": "2026-02-18T14:33:35.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-52308", "record": "MSRC_CVE-2024-52308", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-21T01:16:03.620Z", "date_only": false, "value": "2026-02-21T01:16:03.620Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-52308", "record": "MSRC_CVE-2024-52308", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T08:06:59.113Z", "date_only": false, "value": "2026-06-17T08:06:59.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-52308", "record": "FKIE_CVE-2024-52308", "field": "lastModified"}, {"timestamp": "2026-07-10T08:47:45Z", "date_only": false, "value": "2026-07-10T08:47:45Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21310-1", "record": "OPENSUSE-SU-2026:21310-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-07-10T08:47:45Z", "date_only": false, "value": "2026-07-10T08:47:45Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21310-1", "record": "OPENSUSE-SU-2026:21310-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2026-07-10T08:47:45Z", "date_only": false, "value": "2026-07-10T08:47:45Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21310-1", "record": "OPENSUSE-SU-2026:21310-1", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-10T08:47:45Z", "date_only": false, "value": "2026-07-10T08:47:45Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21310-1", "record": "OPENSUSE-SU-2026:21310-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-01T21:37:06.600Z", "date_only": false, "value": "2026-08-01T21:37:06.600305Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ms2ghnxnp72r", "record": "CVE-2024-52308", "field": "creation_timestamp", "uuid": "bc5cd744-ae73-48f6-a279-5e85bce45e99", "url": "https://bsky.app/profile/cyberhub.blog/post/3ms2ghnxnp72r"}, {"timestamp": "2026-09-16T20:41:51Z", "date_only": false, "value": "2026-09-16T20:41:51Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21310-1", "record": "OPENSUSE-SU-2026:21310-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-16T21:43:37Z", "date_only": false, "value": "2026-09-16T21:43:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21310-1", "record": "OPENSUSE-SU-2026:21310-1", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2026-09-17T17:38:40Z", "date_only": false, "value": "2026-09-17T17:38:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21310-1", "record": "OPENSUSE-SU-2026:21310-1", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-09-17T17:38:40Z", "date_only": false, "value": "2026-09-17T17:38:40Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2026:21310-1", "record": "OPENSUSE-SU-2026:21310-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:21:15Z", "date_only": false, "value": "2026-09-20T21:21:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14509-1", "record": "OPENSUSE-SU-2024:14509-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:21:15Z", "date_only": false, "value": "2026-09-20T21:21:15Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14509-1", "record": "OPENSUSE-SU-2024:14509-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:21:19Z", "date_only": false, "value": "2026-09-20T21:21:19Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14513-1", "record": "OPENSUSE-SU-2024:14513-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:21:19Z", "date_only": false, "value": "2026-09-20T21:21:19Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14513-1", "record": "OPENSUSE-SU-2024:14513-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:23:19Z", "date_only": false, "value": "2026-09-20T21:23:19Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0021-1", "record": "OPENSUSE-SU-2025:0021-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:23:19Z", "date_only": false, "value": "2026-09-20T21:23:19Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:0021-1", "record": "OPENSUSE-SU-2025:0021-1", "field": "document.tracking.current_release_date"}]}