{"metadata": {"vulnerability": "cve-2024-6040", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2024-06-16T14:17:46.463Z", "date_only": false, "value": "2024-06-16T14:17:46.463Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-6040", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-01T15:32:43.624Z", "date_only": false, "value": "2024-08-01T15:32:43.624Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-6040", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-08-01T15:53:46.780Z", "date_only": false, "value": "2024-08-01T15:53:46.780711Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6040", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-01T15:53:46.780Z", "date_only": false, "value": "2024-08-01T15:53:46.780711Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6040", "record": "FKIE_CVE-2024-6040", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-01T15:56:16.480Z", "date_only": false, "value": "2024-08-01T15:56:16.480Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6040", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T16:15:06Z", "date_only": false, "value": "2024-08-01T16:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7QMP-3HH8-G4VW", "record": "GHSA-7QMP-3HH8-G4VW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-01T16:15:06.750Z", "date_only": false, "value": "2024-08-01T16:15:06.750", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6040", "record": "FKIE_CVE-2024-6040", "field": "published"}, {"timestamp": "2024-08-01T18:32:50Z", "date_only": false, "value": "2024-08-01T18:32:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7QMP-3HH8-G4VW", "record": "GHSA-7QMP-3HH8-G4VW", "field": "published"}, {"timestamp": "2024-08-01T18:32:50Z", "date_only": false, "value": "2024-08-01T18:32:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7QMP-3HH8-G4VW", "record": "GHSA-7QMP-3HH8-G4VW", "field": "modified"}, {"timestamp": "2024-08-01T18:46:17Z", "date_only": false, "value": "2024-08-01T18:46:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/2250", "record": "CVE-2024-6040", "field": "creation_timestamp", "uuid": "e5c8fea2-7da0-4f79-954b-22706be85e28", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6040 - Parisneo Lollms-Webui Missing Parameter CSRF and Local Attack Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6040 \nPublished : Aug. 1, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : In parisneo/lollms-webui version v9.8, the lollms_binding_infos is missing the client_id parameter, which leads to multiple security vulnerabilities. Specifically, the endpoints /reload_binding, /install_binding, /reinstall_binding, /unInstall_binding, /set_active_binding_settings, and /update_binding_settings are susceptible to CSRF attacks and local attacks. An attacker can exploit this vulnerability to perform unauthorized actions on the victim's machine. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/2250"}, {"timestamp": "2025-10-15T12:50:32.126Z", "date_only": false, "value": "2025-10-15T12:50:32.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-6040", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-15T12:50:32.126Z", "date_only": false, "value": "2025-10-15T12:50:32.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "cve-2024-6040", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:17:09.687Z", "date_only": false, "value": "2026-06-17T08:17:09.687", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6040", "record": "FKIE_CVE-2024-6040", "field": "lastModified"}]}
