{"metadata": {"vulnerability": "ghsa-32q6-rr98-cjqv", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2024-12-18T23:44:51.604Z", "date_only": false, "value": "2024-12-18T23:44:51.604Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-56323", "record": "CVE-2024-56323", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-13T19:59:24Z", "date_only": false, "value": "2025-01-13T19:59:24Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-32q6-rr98-cjqv", "field": "published"}, {"timestamp": "2025-01-13T21:33:30.556Z", "date_only": false, "value": "2025-01-13T21:33:30.556Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-56323", "record": "CVE-2024-56323", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-13T21:33:30.556Z", "date_only": false, "value": "2025-01-13T21:33:30.556Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-56323 / GitHub_M", "record": "CVE-2024-56323", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-13T21:38:13.247Z", "date_only": false, "value": "2025-01-13T21:38:13.247207Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113823205947381993", "record": "GHSA-32q6-rr98-cjqv", "field": "creation_timestamp", "uuid": "d58805c5-b395-4ce2-85f8-76807451ce4d", "url": "https://infosec.exchange/users/cve/statuses/113823205947381993"}, {"timestamp": "2025-01-13T22:15:14Z", "date_only": false, "value": "2025-01-13T22:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-32q6-rr98-cjqv", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-14T00:29:46.209Z", "date_only": false, "value": "2025-01-14T00:29:46.209818Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-56323 / CISA-ADP", "record": "CVE-2024-56323", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-14T00:29:58.019Z", "date_only": false, "value": "2025-01-14T00:29:58.019Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-56323", "record": "CVE-2024-56323", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-14T00:29:58.019Z", "date_only": false, "value": "2025-01-14T00:29:58.019Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-56323 / CISA-ADP", "record": "CVE-2024-56323", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-14T01:07:30Z", "date_only": false, "value": "2025-01-14T01:07:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1424", "record": "GHSA-32Q6-RR98-CJQV", "field": "creation_timestamp", "uuid": "57d5286c-4c44-482b-a430-b9668fdebc19", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-56323\n\ud83d\udd39 Description: OpenFGA is an authorization/permission engine. IN OpenFGA v1.3.8 to v1.8.2 (Helm chart openfga-0.1.38 to openfga-0.2.19, docker v1.3.8 to v.1.8.2)  are vulnerable to authorization bypass under the following conditions: 1. calling Check API or ListObjects with a model that uses [conditions](https://openfga.dev/docs/modeling/conditions), and 2. calling Check API or ListObjects API with [contextual tuples](https://openfga.dev/docs/concepts#what-are-contextual-tuples) that include conditions and 3. OpenFGA is configured with caching enabled (`OPENFGA_CHECK_QUERY_CACHE_ENABLED`). Users are advised to upgrade to v1.8.3. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-13T21:33:30.556Z\n\ud83d\udccf Modified: 2025-01-14T00:29:58.019Z\n\ud83d\udd17 References:\n1. https://github.com/openfga/openfga/security/advisories/GHSA-32q6-rr98-cjqv", "url": "https://t.me/DarkWebInformer_CVEAlerts/1424"}, {"timestamp": "2025-01-14T21:08:16Z", "date_only": false, "value": "2025-01-14T21:08:16Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-32q6-rr98-cjqv", "field": "modified"}]}