{"vulnerability": "CVE-2024-24758", "sightings": [{"uuid": "e6e74a69-d75b-455d-a3ee-2c1f6e12200b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24758", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}, {"uuid": "ce4644b8-6032-47e7-851b-49b9d4f10b50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24758", "type": "seen", "source": "https://t.me/arpsyndicate/4525", "content": "#ExploitObserverAlert\n\nCVE-2024-24758\n\nDESCRIPTION: Exploit Observer has 8 entries in 1 file formats related to CVE-2024-24758. Undici is an HTTP/1.1 client, written from scratch for Node.js. Undici already cleared Authorization headers on cross-origin redirects, but did not clear `Proxy-Authentication` headers. This issue has been patched in versions 5.28.3 and 6.6.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.5780347", "creation_timestamp": "2024-04-12T05:22:30.000000Z"}, {"uuid": "d7e9a558-eeef-4dfd-8eb1-136e1d4dcf73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24758", "type": "seen", "source": "https://t.me/ctinow/203166", "content": "https://ift.tt/lerPmO3\nCVE-2024-24758 | Undici Header Proxy-Authorization unknown vulnerability", "creation_timestamp": "2024-03-08T09:26:18.000000Z"}, {"uuid": "253ba3f9-a0e5-4f02-935f-a50ae5d90dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24758", "type": "seen", "source": "https://t.me/ctinow/186690", "content": "https://ift.tt/zNSWfpv\nCVE-2024-24758", "creation_timestamp": "2024-02-16T23:21:52.000000Z"}, {"uuid": "3476d116-0ef4-48bf-aebf-04981762a977", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24758", "type": "seen", "source": "https://t.me/ctinow/187244", "content": "https://ift.tt/Sk7FycJ\nCVE-2024-24758", "creation_timestamp": "2024-02-18T13:21:49.000000Z"}]}