Fuck this bullshit. This 2024 CVE was just published today. Which, fine, whatever. It happens. Except it specifically says it was observed EITW in July 2024.
https://www.cve.org/CVERecord?id=CVE-2024-58388
Exploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30.
Witholding a CVE for something known to be EITW for over two years is fucking bullshit. Especially when the PoC was published in June 2024:
https://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-lfi
But at least there's a Nuclei template:
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/crocus-lfi.yaml
:rainbowCrow:
npub1z3…cp45m
2026-10-01 14:52:02 UTC
Author Public Key
npub1z3sfut2znnrtgl0qt4q6npq8zmjd9c97ck0gh0me44ua6lzaaajq6cp45mSeen on
wss://relay.ditto.pubPublished at
2026-10-01 14:52:02 UTCEvent JSON
{
"id": "1a68490a02400d6c622a6b5be30f5a7c842a196811974535c24e7957ace9abd0",
"pubkey": "14609e2d429cc6b47de05d41a9840716e4d2e0bec59e8bbf79ad79dd7c5def64",
"created_at": 1790866322,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/users/cR0w/statuses/117366215304208325",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "Fuck this bullshit. This 2024 CVE was just published today. Which, fine, whatever. It happens. Except it specifically says it was observed EITW in July 2024. \n\nhttps://www.cve.org/CVERecord?id=CVE-2024-58388\n\nExploitation evidence was first observed by the Shadowserver Foundation on 2024-07-30.\n\nWitholding a CVE for something known to be EITW for over two years is fucking bullshit. Especially when the PoC was published in June 2024:\n\nhttps://pierrekim.github.io/blog/2024-06-27-sharp-mfp-17-vulnerabilities.html#pre-auth-lfi\n\nBut at least there's a Nuclei template:\n\nhttps://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/crocus-lfi.yaml",
"sig": "775b8111b1268f38f0437f28fbd46eab0532f911ee26107143c83499ffce357c753263264177677df08fb4474f897ea2995b4414b95940587928977b0535a249"
}