{"metadata": {"vulnerability": "cve-2024-7049", "count": 11, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2024-07-23T19:15:08.148Z", "date_only": false, "value": "2024-07-23T19:15:08.148Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-7049", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-10-10T07:15:55.293Z", "date_only": false, "value": "2024-10-10T07:15:55.293Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-7049", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-10-10T08:15:03Z", "date_only": false, "value": "2024-10-10T08:15:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-947M-JHCV-94RP", "record": "GHSA-947M-JHCV-94RP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-10-10T08:15:03.910Z", "date_only": false, "value": "2024-10-10T08:15:03.910", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7049", "record": "FKIE_CVE-2024-7049", "field": "published"}, {"timestamp": "2024-10-10T09:30:35Z", "date_only": false, "value": "2024-10-10T09:30:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-947M-JHCV-94RP", "record": "GHSA-947M-JHCV-94RP", "field": "published"}, {"timestamp": "2024-10-10T09:30:35Z", "date_only": false, "value": "2024-10-10T09:30:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-947M-JHCV-94RP", "record": "GHSA-947M-JHCV-94RP", "field": "modified"}, {"timestamp": "2024-10-10T10:54:02Z", "date_only": false, "value": "2024-10-10T10:54:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/7572", "record": "CVE-2024-7049", "field": "creation_timestamp", "uuid": "3ad97224-61af-4fa3-b8e0-81559cc605d6", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7049 - Open-WebUI Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-7049 \nPublished : Oct. 10, 2024, 8:15 a.m. | 37\u00a0minutes ago \nDescription : In version v0.3.8 of open-webui/open-webui, a vulnerability exists where a token is returned when a user with a pending role logs in. This allows the user to perform actions without admin confirmation, bypassing the intended approval process. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/7572"}, {"timestamp": "2026-09-11T09:21:18.945Z", "date_only": false, "value": "2026-09-11T09:21:18.945Z", "kind": "other", "label": "Rejected", "source": "cvelistv5", "record": "cve-2024-7049", "field": "cveMetadata.dateRejected"}, {"timestamp": "2026-09-11T09:21:18.945Z", "date_only": false, "value": "2026-09-11T09:21:18.945Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-7049", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-11T09:21:18.945Z", "date_only": false, "value": "2026-09-11T09:21:18.945Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "cve-2024-7049", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-11T10:16:49.593Z", "date_only": false, "value": "2026-09-11T10:16:49.593", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7049", "record": "FKIE_CVE-2024-7049", "field": "lastModified"}]}