{"metadata": {"vulnerability": "cve-2024-7776", "count": 23, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 15}}, "data": [{"timestamp": "2024-08-13T21:28:43.911Z", "date_only": false, "value": "2024-08-13T21:28:43.911Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2024-7776", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-20T10:10:58.740Z", "date_only": false, "value": "2025-03-20T10:10:58.740Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2024-7776", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-03-20T10:10:58.740Z", "date_only": false, "value": "2025-03-20T10:10:58.740Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "cve-2024-7776", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-20T10:15:00Z", "date_only": false, "value": "2025-03-20T10:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-7776", "record": "UBUNTU-CVE-2024-7776", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-20T10:15:37Z", "date_only": false, "value": "2025-03-20T10:15:37Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H36J-8VV3-CJ52", "record": "GHSA-H36J-8VV3-CJ52", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-03-20T10:15:37Z", "date_only": false, "value": "2025-03-20T10:15:37+00:00", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2025-10", "record": "PYSEC-2025-10", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-20T10:15:37.520Z", "date_only": false, "value": "2025-03-20T10:15:37.520", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7776", "record": "FKIE_CVE-2024-7776", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-20T12:32:46Z", "date_only": false, "value": "2025-03-20T12:32:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H36J-8VV3-CJ52", "record": "GHSA-H36J-8VV3-CJ52", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-03-20T15:51:57.316Z", "date_only": false, "value": "2025-03-20T15:51:57.316678Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-7776", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-20T15:51:57.316Z", "date_only": false, "value": "2025-03-20T15:51:57.316678Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7776", "record": "FKIE_CVE-2024-7776", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-03-20T15:52:00.491Z", "date_only": false, "value": "2025-03-20T15:52:00.491Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2024-7776", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-20T15:52:00.491Z", "date_only": false, "value": "2025-03-20T15:52:00.491Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2024-7776", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-20T16:18:12Z", "date_only": false, "value": "2025-03-20T16:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8224", "record": "CVE-2024-7776", "field": "creation_timestamp", "uuid": "bb17e9ca-b828-42cf-aa39-7b4f94824126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-7776\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.\n\ud83d\udccf Published: 2025-03-20T10:10:58.740Z\n\ud83d\udccf Modified: 2025-03-20T15:52:00.491Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63", "url": "https://t.me/DarkWebInformer_CVEAlerts/8224", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-26T19:21:38.843Z", "date_only": false, "value": "2025-03-26T19:21:38.843396+00:00", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2025-10", "record": "PYSEC-2025-10", "field": "modified", "linked_record": true}, {"timestamp": "2025-03-27T17:41:58Z", "date_only": false, "value": "2025-03-27T17:41:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H36J-8VV3-CJ52", "record": "GHSA-H36J-8VV3-CJ52", "field": "modified", "linked_record": true}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-02-18T01:31:15Z", "date_only": false, "value": "2026-02-18T01:31:15.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-02-18T01:31:15Z", "date_only": false, "value": "2026-02-18T01:31:15.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-22T12:38:39.012Z", "date_only": false, "value": "2026-05-22T12:38:39.012Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-05-26T19:49:14Z", "date_only": false, "value": "2026-05-26T19:49:14Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2024-7776", "record": "UBUNTU-CVE-2024-7776", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T08:20:53.973Z", "date_only": false, "value": "2026-06-17T08:20:53.973", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7776", "record": "FKIE_CVE-2024-7776", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T23:09:51.533Z", "anchors": {"origin": {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2025-03-20T16:18:12Z", "date_only": false, "value": "2025-03-20T16:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8224", "record": "CVE-2024-7776", "field": "creation_timestamp", "uuid": "bb17e9ca-b828-42cf-aa39-7b4f94824126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-7776\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.\n\ud83d\udccf Published: 2025-03-20T10:10:58.740Z\n\ud83d\udccf Modified: 2025-03-20T15:52:00.491Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63", "url": "https://t.me/DarkWebInformer_CVEAlerts/8224", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1613892.0, "hours": 448.30333333333334, "days": 18.679305555555555, "min_seconds": 1527492.0, "max_seconds": 1613892.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-03-20T16:18:12Z", "date_only": false, "value": "2025-03-20T16:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8224", "record": "CVE-2024-7776", "field": "creation_timestamp", "uuid": "bb17e9ca-b828-42cf-aa39-7b4f94824126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-7776\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.\n\ud83d\udccf Published: 2025-03-20T10:10:58.740Z\n\ud83d\udccf Modified: 2025-03-20T15:52:00.491Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63", "url": "https://t.me/DarkWebInformer_CVEAlerts/8224", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": false, "missing": ["start"]}, "disclosure_to_patch": {"available": true, "seconds": 2592000.0, "hours": 720.0, "days": 30.0, "min_seconds": 2505600.0, "max_seconds": 2678400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "time_unpatched": {"available": true, "seconds": 2592000.0, "hours": 720.0, "days": 30.0, "min_seconds": 2505600.0, "max_seconds": 2678400.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-02T00:00:00Z", "date_only": false, "value": "2025-03-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 978108.0, "hours": 271.69666666666666, "days": 11.320694444444445, "min_seconds": 978108.0, "max_seconds": 1064508.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-03-20T16:18:12Z", "date_only": false, "value": "2025-03-20T16:18:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8224", "record": "CVE-2024-7776", "field": "creation_timestamp", "uuid": "bb17e9ca-b828-42cf-aa39-7b4f94824126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-7776\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows for arbitrary file overwrite due to inadequate prevention of path traversal attacks in malicious tar files. This vulnerability can be exploited by an attacker to overwrite files in the user's directory, potentially leading to remote command execution.\n\ud83d\udccf Published: 2025-03-20T10:10:58.740Z\n\ud83d\udccf Modified: 2025-03-20T15:52:00.491Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/a7a46cf6-1fa0-454b-988c-62d222e83f63", "url": "https://t.me/DarkWebInformer_CVEAlerts/8224", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000Z", "kind": "other", "label": "Vendor fix", "source": "csaf_microsoft \u00b7 MSRC_CVE-2024-7776", "record": "MSRC_CVE-2024-7776", "field": "vulnerabilities.0.remediations.0.date", "metric_role": "patch", "metric_basis": "recorded_event", "linked_record": true}}}}