{"vulnerability": "CVE-2024-21534", "sightings": [{"uuid": "538fd0b5-f8a1-47a5-8e4f-16291a1cc964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114006161366925881", "content": "", "creation_timestamp": "2025-02-15T05:06:08.831971Z"}, {"uuid": "d0f98758-194f-4a5f-bb59-5d7b58d77822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li7o65dim32h", "content": "", "creation_timestamp": "2025-02-15T12:00:08.892779Z"}, {"uuid": "cfcdb0f1-ecb1-48b6-8af3-4b4fab27faac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3liawfmwhc72h", "content": "", "creation_timestamp": "2025-02-16T00:00:08.675265Z"}, {"uuid": "cfcba34c-a574-4342-ade6-2950ad633398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://gist.github.com/EduardoCorpay/fdaeb4ec65cc4a1c8fcd2fb0162de09c", "content": "", "creation_timestamp": "2025-06-11T15:29:00.000000Z"}, {"uuid": "23fa0894-e494-4efe-be64-8b9348ec3e9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9172", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u9a8c\u8bc1\n\u63cf\u8ff0\uff1ajsonpath-plus \u5305\uff08\u7248\u672c <=10.0.7\uff09\u5b58\u5728\u4e25\u91cd\u7684\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff08RCE\uff09\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u901a\u8fc7 Node.js \u7684 VM \u6a21\u5757\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u8be5\u6f0f\u6d1e\u7531\u4e8e\u8f93\u5165\u9a8c\u8bc1\u4e0d\u4e25\u683c\u5bfc\u81f4\uff0c\u5f71\u54cd\u7248\u672c\u4e3a 10.0.7 \u4ee5\u4e0b\uff0cCVSS \u5206\u6570\u4e3a 9.8\uff08\u6781\u5176\u4e25\u91cd\uff09\u3002\u6f0f\u6d1e\u9996\u6b21\u516c\u5f00\u4e8e 2024 \u5e74 10 \u6708 11 \u65e5\u3002\nURL\uff1ahttps://github.com/XiaomingX/cve-2024-21534-poc\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u9a8c\u8bc1", "creation_timestamp": "2024-11-25T06:25:50.000000Z"}, {"uuid": "2bdfd131-5ea5-46bf-a98e-df706628474c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9224", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE) due to improper input sanitization\nURL\uff1ahttps://github.com/ghostwirez/CVE-2024-39090-PoC\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-29T01:05:02.000000Z"}, {"uuid": "c9c3bd2b-be2e-4ec3-b903-2bc0dd0ed231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9221", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aPOC - CVE-2024-21534 Jsonpath-plus vulnerable to Remote Code Execution (RCE) due to improper input sanitization\nURL\uff1ahttps://github.com/verylazytech/cve-2024-21534\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-28T18:27:39.000000Z"}, {"uuid": "14b1d604-f7ee-425d-98ae-53e998f6e92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4533", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1302\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode.\n\n**Note:**\n\nThis is caused by an incomplete fix for [CVE-2024-21534](https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-7945884).\n\ud83d\udccf Published: 2025-02-15T06:30:51Z\n\ud83d\udccf Modified: 2025-02-15T06:30:51Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-1302\n2. https://github.com/JSONPath-Plus/JSONPath/commit/30942896d27cb8a806b965a5ca9ef9f686be24ee\n3. https://gist.github.com/nickcopi/11ba3cb4fdee6f89e02e6afae8db6456\n4. https://github.com/JSONPath-Plus/JSONPath/blob/8e4acf8aff5f446aa66323e12394ac5615c3b260/src/Safe-Script.js%23L127\n5. https://security.snyk.io/vuln/SNYK-JS-JSONPATHPLUS-8719585", "creation_timestamp": "2025-02-15T07:11:13.000000Z"}, {"uuid": "f01931e1-da93-40fa-a540-b589d8c16711", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://t.me/cvedetector/18161", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1302 - Jsonpath-Plus Remote Code Execution (RCE)\", \n  \"Content\": \"CVE ID : CVE-2025-1302 \nPublished : Feb. 15, 2025, 5:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode.  \n  \n**Note:**  \n  \nThis is caused by an incomplete fix for [CVE-2024-21534](). \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T08:30:33.000000Z"}, {"uuid": "95e8c176-99eb-4ae1-af4b-09d9d766f0e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "Telegram/B6Ro0XJaa5S2akdaKXUWQAw0I4uY8L6ZTgeKaeLAe3cSfbhr", "content": "", "creation_timestamp": "2025-02-15T23:50:18.000000Z"}, {"uuid": "194f1915-7fde-4f29-bc74-5f12bbeee16e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "Telegram/WDhF5XevgqviS_8KCjmZ87T-69A_WAI0o-K_reZtmExyTW4", "content": "", "creation_timestamp": "2024-11-13T11:34:23.000000Z"}, {"uuid": "46e61159-2dd3-496a-95ba-6674f26359b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://gist.github.com/harikrishnankv/ea3e99b5227529d90b21799dfa214b79", "content": "", "creation_timestamp": "2026-05-06T14:08:05.000000Z"}, {"uuid": "62b55a0c-ac1a-4bec-9e7d-f371142c91de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/147056", "content": "", "creation_timestamp": "2026-09-03T15:00:05.234373Z"}, {"uuid": "1917d4fa-8803-40e2-8a0f-b32e1dc6c5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/147058", "content": "", "creation_timestamp": "2026-09-03T15:00:05.175108Z"}, {"uuid": "f3c0c6a1-809a-4e0c-b1de-6aaf384311c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "Telegram/wM44PB7rs9Na_M_NX9_ZEY8E_RYf0GtNF8Am5ZddqV3Wors", "content": "", "creation_timestamp": "2026-09-03T08:00:04.410736Z"}, {"uuid": "36936a1d-0c1c-4e0a-9ee8-07a987059f7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://t.me/hacking_Attack/147058", "content": "", "creation_timestamp": "2026-09-01T20:00:29.316162Z"}, {"uuid": "59f4c8a0-fe49-40db-9ebf-469d972f7ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://t.me/hacking_Attack/147056", "content": "", "creation_timestamp": "2026-09-01T20:00:28.303775Z"}, {"uuid": "8513e8a6-3c81-4697-9abf-ac62619e03c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/16967", "content": "", "creation_timestamp": "2026-08-29T00:00:31.710013Z"}, {"uuid": "a844a359-c864-4067-9180-5999a87f1d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://t.me/CyberSecurityExploit/16967", "content": "", "creation_timestamp": "2026-08-27T20:00:11.008877Z"}, {"uuid": "1b6ddc06-191e-4356-82aa-32d25fa7bf5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/29327", "content": "", "creation_timestamp": "2026-08-16T00:00:23.115884Z"}, {"uuid": "45fefcec-8a1a-46b4-8ec4-cc959c735343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-21534", "type": "seen", "source": "https://t.me/CyberSecurityExploit/29327", "content": "", "creation_timestamp": "2026-08-15T11:00:08.151058Z"}]}