{"vulnerability": "CVE-2024-21511", "sightings": [{"uuid": "a046ef9c-f6f8-4f26-b2ba-6580354fa31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21511", "type": "seen", "source": "https://t.me/arpsyndicate/4780", "content": "#ExploitObserverAlert\n\nCVE-2024-21511\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-21511. Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function.\n\nFIRST-EPSS: 0.000450000\nARPS-PRIORITY: 0.7131285", "creation_timestamp": "2024-04-24T07:33:08.000000Z"}, {"uuid": "df4a6d97-fdcb-4d56-9199-15f20103bce0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21511", "type": "seen", "source": "https://t.me/arpsyndicate/4779", "content": "#ExploitObserverAlert\n\nCVE-2024-21511\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-21511. Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function.\n\nFIRST-EPSS: 0.000450000\nARPS-PRIORITY: 0.7131285", "creation_timestamp": "2024-04-24T01:44:44.000000Z"}, {"uuid": "e2510dd5-bddf-410f-a501-aa3c59bdb59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21511", "type": "seen", "source": "https://t.me/arpsyndicate/4824", "content": "#ExploitObserverAlert\n\nCVE-2024-21511\n\nDESCRIPTION: Exploit Observer has 6 entries in 3 file formats related to CVE-2024-21511. Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function.\n\nFIRST-EPSS: 0.000450000\nARPS-PRIORITY: 0.757628", "creation_timestamp": "2024-04-24T21:34:52.000000Z"}, {"uuid": "b63897ad-24a4-4b21-ae92-d11ae025df01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21511", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvar5ywvhb22", "content": "CVE-2024-21511 - mysql2\nThe mysql2 library used in several projects (sidorares/mysql2, @rootio/mysql2, GitHub Actions/mysql2, and mysql2) has a security weakness that could allow an attacker to execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#mysql2 #sidorares #npm #CVE #infosec", "creation_timestamp": "2026-09-11T14:20:06.671646Z"}]}