{"metadata": {"vulnerability": "cve-2024-55964", "count": 15, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 7}}, "data": [{"timestamp": "2024-12-13T00:00:00Z", "date_only": false, "value": "2024-12-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-55964", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-55964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-26T20:07:25.669Z", "date_only": false, "value": "2025-03-26T20:07:25.669Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2024-55964", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-26T20:15:21.373Z", "date_only": false, "value": "2025-03-26T20:15:21.373", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-55964", "record": "FKIE_CVE-2024-55964", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-26T20:25:59Z", "date_only": false, "value": "2025-03-26T20:25:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8967", "record": "CVE-2024-55964", "field": "creation_timestamp", "uuid": "c70670c5-4bf9-471a-bb8a-4bfa9a2f8038", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55964\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.\n\ud83d\udccf Published: 2025-03-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:07:25.669Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-m95x-4w54-gc83", "url": "https://t.me/DarkWebInformer_CVEAlerts/8967", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-26T22:15:26Z", "date_only": false, "value": "2025-03-26T22:15:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/21220", "record": "CVE-2024-55964", "field": "creation_timestamp", "uuid": "26a34b50-769a-4f52-9feb-45455c04208f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55964 - Appsmith PostgreSQL Command Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-55964 \nPublished : March 26, 2025, 8:15 p.m. | 31\u00a0minutes ago \nDescription : An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21220"}, {"timestamp": "2025-03-27T13:32:42.711Z", "date_only": false, "value": "2025-03-27T13:32:42.711646Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-55964", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-03-27T13:32:42.711Z", "date_only": false, "value": "2025-03-27T13:32:42.711646Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-55964", "record": "FKIE_CVE-2024-55964", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-27T13:33:44.023Z", "date_only": false, "value": "2025-03-27T13:33:44.023Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-55964", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-27T13:33:44.023Z", "date_only": false, "value": "2025-03-27T13:33:44.023Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-55964", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-02T07:06:54.525Z", "date_only": false, "value": "2025-04-02T07:06:54.525Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-APPSMITH-2024-55964", "record": "BIT-APPSMITH-2024-55964", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-07T14:00:17Z", "date_only": false, "value": "2025-04-07T14:00:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb", "record": "CVE-2024-55964", "field": "creation_timestamp", "uuid": "48cda5af-a46a-4efa-bf35-aa565d05fd2d", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/appsmith_rce_cve_2024_55964.rb"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2024-55964", "field": "creation_timestamp", "uuid": "94164c2d-2f13-481d-8236-bb91daae4e52"}, {"timestamp": "2026-06-17T08:11:30.460Z", "date_only": false, "value": "2026-06-17T08:11:30.460", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-55964", "record": "FKIE_CVE-2024-55964", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-APPSMITH-2024-55964", "record": "BIT-APPSMITH-2024-55964", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-10T02:56:06.495Z", "anchors": {"origin": {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-55964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-55964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-03-26T20:25:59Z", "date_only": false, "value": "2025-03-26T20:25:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8967", "record": "CVE-2024-55964", "field": "creation_timestamp", "uuid": "c70670c5-4bf9-471a-bb8a-4bfa9a2f8038", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55964\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.\n\ud83d\udccf Published: 2025-03-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:07:25.669Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-m95x-4w54-gc83", "url": "https://t.me/DarkWebInformer_CVEAlerts/8967", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 73559.0, "hours": 20.433055555555555, "days": 0.8513773148148148, "min_seconds": -12841.0, "max_seconds": 73559.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-55964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-03-26T20:25:59Z", "date_only": false, "value": "2025-03-26T20:25:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8967", "record": "CVE-2024-55964", "field": "creation_timestamp", "uuid": "c70670c5-4bf9-471a-bb8a-4bfa9a2f8038", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55964\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.\n\ud83d\udccf Published: 2025-03-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:07:25.669Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-m95x-4w54-gc83", "url": "https://t.me/DarkWebInformer_CVEAlerts/8967", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 51332166.49518, "hours": 14258.935137550001, "days": 594.1222973979167, "min_seconds": 51245766.49518, "max_seconds": 51332166.49518, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-26T00:00:00Z", "date_only": false, "value": "2025-03-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-55964", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T02:56:06.495Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 51258607.49518, "hours": 14238.502081994446, "days": 593.2709200831019, "min_seconds": 51258607.49518, "max_seconds": 51258607.49518, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-26T20:25:59Z", "date_only": false, "value": "2025-03-26T20:25:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8967", "record": "CVE-2024-55964", "field": "creation_timestamp", "uuid": "c70670c5-4bf9-471a-bb8a-4bfa9a2f8038", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55964\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.\n\ud83d\udccf Published: 2025-03-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T20:07:25.669Z\n\ud83d\udd17 References:\n1. https://github.com/appsmithorg/appsmith/security/advisories/GHSA-m95x-4w54-gc83", "url": "https://t.me/DarkWebInformer_CVEAlerts/8967", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-10T02:56:06.495Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}