{"metadata": {"vulnerability": "ghsa-q7vr-846r-64q8", "count": 12, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 8}}, "data": [{"timestamp": "2024-01-23T10:55:17.780Z", "date_only": false, "value": "2024-01-23T10:55:17.780Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2024-23862", "record": "CVE-2024-23862", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-01-23T12:00:00Z", "date_only": false, "value": "2024-01-23T12:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 \u00b7 CVE-2024-23862 / INCIBE", "record": "CVE-2024-23862", "field": "containers.cna.datePublic"}, {"timestamp": "2024-01-26T09:06:34.048Z", "date_only": false, "value": "2024-01-26T09:06:34.048Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2024-23862", "record": "CVE-2024-23862", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-26T09:15:09Z", "date_only": false, "value": "2024-01-26T09:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-q7vr-846r-64q8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-26T09:30:24Z", "date_only": false, "value": "2024-01-26T09:30:24Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-q7vr-846r-64q8", "field": "published"}, {"timestamp": "2024-01-26T09:30:24Z", "date_only": false, "value": "2024-01-26T09:30:24Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-q7vr-846r-64q8", "field": "modified"}, {"timestamp": "2024-01-29T09:03:25Z", "date_only": false, "value": "2024-01-29T09:03:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3308", "record": "GHSA-Q7VR-846R-64Q8", "field": "creation_timestamp", "uuid": "3d4dc1c1-aeee-4312-813e-b7a38b581ee8", "content": "#ExploitObserverAlert\n\nGHSA-q7vr-846r-64q8\n\nDESCRIPTION: Exploit Observer has 2 entries in 2 file formats related to GHSA-q7vr-846r-64q8. A vulnerability has been reported in Cups Easy (Purchase & Inventory), version 1.0, whereby user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability via /cupseasylive/grndisplay.php, in the grnno parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted URL to an authenticated user and steal their session cookie credentials.", "url": "https://t.me/arpsyndicate/3308"}, {"timestamp": "2024-02-15T09:23:58.353Z", "date_only": false, "value": "2024-02-15T09:23:58.353Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23862 / INCIBE", "record": "CVE-2024-23862", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-01T23:13:08.455Z", "date_only": false, "value": "2024-08-01T23:13:08.455Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23862 / CVE", "record": "CVE-2024-23862", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T15:52:28.059Z", "date_only": false, "value": "2025-05-08T15:52:28.059333Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2024-23862 / CISA-ADP", "record": "CVE-2024-23862", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-29T15:16:30.506Z", "date_only": false, "value": "2025-05-29T15:16:30.506Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23862", "record": "CVE-2024-23862", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-29T15:16:30.506Z", "date_only": false, "value": "2025-05-29T15:16:30.506Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2024-23862 / CISA-ADP", "record": "CVE-2024-23862", "field": "containers.adp.1.providerMetadata.dateUpdated"}]}