{"metadata": {"vulnerability": "cve-2024-6959", "count": 13, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2024-07-20T22:27:51.135Z", "date_only": false, "value": "2024-07-20T22:27:51.135Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-6959", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-13T12:28:19.491Z", "date_only": false, "value": "2024-10-13T12:28:19.491Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-6959", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-13T13:15:10Z", "date_only": false, "value": "2024-10-13T13:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-33R9-M4VJ-8H9P", "record": "GHSA-33R9-M4VJ-8H9P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-13T13:15:10.880Z", "date_only": false, "value": "2024-10-13T13:15:10.880", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6959", "record": "FKIE_CVE-2024-6959", "field": "published"}, {"timestamp": "2024-10-13T15:30:33Z", "date_only": false, "value": "2024-10-13T15:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-33R9-M4VJ-8H9P", "record": "GHSA-33R9-M4VJ-8H9P", "field": "published"}, {"timestamp": "2024-10-13T15:30:33Z", "date_only": false, "value": "2024-10-13T15:30:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-33R9-M4VJ-8H9P", "record": "GHSA-33R9-M4VJ-8H9P", "field": "modified"}, {"timestamp": "2024-10-13T16:25:03Z", "date_only": false, "value": "2024-10-13T16:25:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/7782", "record": "CVE-2024-6959", "field": "creation_timestamp", "uuid": "d5d9fa52-f8f1-4179-9b70-0c9aa6a9c1c9", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6959 - \"Parisneo Lollms WebUI Multipart Boundary Abuse Denial-of-Service Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-6959 \nPublished : Oct. 13, 2024, 1:15 p.m. | 42\u00a0minutes ago \nDescription : A vulnerability in parisneo/lollms-webui version 9.8 allows for a Denial of Service (DOS) attack when uploading an audio file. If an attacker appends a large number of characters to the end of a multipart boundary, the system will continuously process each character, rendering lollms-webui inaccessible. This issue is exacerbated by the lack of Cross-Site Request Forgery (CSRF) protection, enabling remote exploitation. The vulnerability leads to service disruption, resource exhaustion, and extended downtime. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/7782"}, {"timestamp": "2024-10-15T13:19:26.593Z", "date_only": false, "value": "2024-10-15T13:19:26.593442Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6959", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-15T13:19:26.593Z", "date_only": false, "value": "2024-10-15T13:19:26.593442Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6959", "record": "FKIE_CVE-2024-6959", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-15T13:47:52.601Z", "date_only": false, "value": "2024-10-15T13:47:52.601Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-6959", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-03T18:27:25.639Z", "date_only": false, "value": "2024-11-03T18:27:25.639Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-6959", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-11-03T18:27:25.639Z", "date_only": false, "value": "2024-11-03T18:27:25.639Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "cve-2024-6959", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:19:04.620Z", "date_only": false, "value": "2026-06-17T08:19:04.620", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-6959", "record": "FKIE_CVE-2024-6959", "field": "lastModified"}]}
