{"metadata": {"vulnerability": "ghsa-6698-mhxx-r84g", "count": 12, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 7}}, "data": [{"timestamp": "2024-01-08T04:59:27.370Z", "date_only": false, "value": "2024-01-08T04:59:27.370Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-22192", "record": "CVE-2024-22192", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-01-16T21:13:40Z", "date_only": false, "value": "2024-01-16T21:13:40Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-6698-mhxx-r84g", "field": "published"}, {"timestamp": "2024-01-16T21:44:53.121Z", "date_only": false, "value": "2024-01-16T21:44:53.121Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-22192", "record": "CVE-2024-22192", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-16T21:44:53.121Z", "date_only": false, "value": "2024-01-16T21:44:53.121Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-22192 / GitHub_M", "record": "CVE-2024-22192", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-16T22:15:46Z", "date_only": false, "value": "2024-01-16T22:15:46Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-6698-mhxx-r84g", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-16T22:26:54Z", "date_only": false, "value": "2024-01-16T22:26:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/169020", "record": "GHSA-6698-MHXX-R84G", "field": "creation_timestamp", "uuid": "e5049ceb-331c-4f01-88c3-6f9484ebb63c", "content": "https://ift.tt/haRyFIX\n[GHSA-6698-mhxx-r84g] Ursa CL-Signatures Revocation allows verifiers to generate unique identifiers for holders", "url": "https://t.me/ctinow/169020"}, {"timestamp": "2024-01-19T19:28:25Z", "date_only": false, "value": "2024-01-19T19:28:25Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-6698-mhxx-r84g", "field": "modified"}, {"timestamp": "2024-02-14T19:57:42.792Z", "date_only": false, "value": "2024-02-14T19:57:42.792215Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-22192 / CISA-ADP", "record": "CVE-2024-22192", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-01T22:35:34.928Z", "date_only": false, "value": "2024-08-01T22:35:34.928Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-22192 / CVE", "record": "CVE-2024-22192", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-16T19:46:20.983Z", "date_only": false, "value": "2025-06-16T19:46:20.983Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-22192", "record": "CVE-2024-22192", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-16T19:46:20.983Z", "date_only": false, "value": "2025-06-16T19:46:20.983Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-22192 / CISA-ADP", "record": "CVE-2024-22192", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-16T20:37:26Z", "date_only": false, "value": "2025-06-16T20:37:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18538", "record": "GHSA-6698-MHXX-R84G", "field": "creation_timestamp", "uuid": "c9980fdc-9e89-47a8-92c0-874645625477", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-22192\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Ursa is a cryptographic library for use with blockchains. The revocation scheme that is part of the Ursa CL-Signatures implementations has a flaw that could impact the privacy guarantees defined by the AnonCreds verifiable credential model. Notably, a malicious verifier may be able to generate a unique identifier for a holder providing a verifiable presentation that includes a Non-Revocation proof. The impact of the flaw is that a malicious verifier may be able to determine a unique identifier for a holder presenting a Non-Revocation proof. Ursa has moved to end-of-life status and no fix is expected.\n\ud83d\udccf Published: 2024-01-16T21:44:53.121Z\n\ud83d\udccf Modified: 2025-06-16T19:46:20.983Z\n\ud83d\udd17 References:\n1. https://github.com/hyperledger-archives/ursa/security/advisories/GHSA-6698-mhxx-r84g", "url": "https://t.me/DarkWebInformer_CVEAlerts/18538"}]}