{
  "schemaVersion": 1,
  "attribution": [
    {
      "source": "CISA Known Exploited Vulnerabilities",
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "licence": "US government work"
    },
    {
      "source": "GitHub Advisory Database",
      "url": "https://github.com/advisories",
      "licence": "CC BY 4.0"
    },
    {
      "source": "Have I Been Pwned",
      "url": "https://haveibeenpwned.com/",
      "licence": "CC BY 4.0"
    },
    {
      "source": "CVE Program (CVE records)",
      "url": "https://www.cve.org/Legal/TermsOfUse",
      "licence": "CVE Terms of Use",
      "notice": "Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.",
      "terms": "CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy."
    },
    {
      "source": "FIRST EPSS",
      "url": "https://www.first.org/epss/",
      "licence": "free to use; FIRST requests attribution"
    }
  ],
  "record": {
    "id": "CVE-2024-8912",
    "sourceURL": "https://www.cve.org/CVERecord?id=CVE-2024-8912",
    "idYear": 2024,
    "status": "PUBLISHED",
    "publishedAt": "2024-10-11T18:22:50.565Z",
    "updatedAt": "2024-10-11T18:32:20.493Z",
    "importedAt": "2026-10-24T01:57:24.991Z",
    "snapshot": {
      "id": "cve_2026-10-24_midnight_baseline",
      "at": "2026-10-24T00:00:00.000Z",
      "source": "https://github.com/CVEProject/cvelistV5/releases/tag/cve_2026-10-24_0100Z"
    },
    "facts": {
      "title": "HTTP Request Smuggling in Looker",
      "summary": "An HTTP Request Smuggling vulnerability in Looker allowed an unauthorized attacker to capture HTTP responses destined for legitimate users.\n\nThere are two Looker versions that are hosted by Looker:\n\n  *  Looker (Google Cloud core) was found to be vulnerable. This issue has already been mitigated and our investigation has found no signs of exploitation.\n  *  Looker (original) was not vulnerable to this issue.\n\n\nCustomer-hosted Looker instances were found to be vulnerable and must be upgraded.\n\nThis vulnerability has been patched in all supported versions of customer-hosted Looker, which are available on the  Looker download page https://download.looker.com/ .\n\nFor Looker customer-hosted instances, please update to the latest supported version of Looker as soon as possible. The versions below have all been updated to protect from this vulnerability. You can download these versions at the Looker download page:\n\n  *  23.12 -> 23.12.123+\n  *  23.18 -> 23.18.117+\n  *  24.0 -> 24.0.92+\n  *  24.6 -> 24.6.77+\n  *  24.8 -> 24.8.66+\n  *  24.10 -> 24.10.78+\n  *  24.12 -> 24.12.56+\n  *  24.14 -> 24.14.37+",
      "affected": [
        {
          "vendor": "Google",
          "product": "Looker",
          "platforms": [
            "Customer-hosted instances"
          ],
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "23.12.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "23.12.123"
            },
            {
              "version": "23.18.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "23.18.117"
            },
            {
              "version": "24.0.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "24.0.92"
            },
            {
              "version": "24.6.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "24.6.77"
            },
            {
              "version": "24.8.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "24.8.66"
            },
            {
              "version": "24.10.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "24.10.78"
            },
            {
              "version": "24.12.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "24.12.56"
            },
            {
              "version": "24.14.0",
              "status": "affected",
              "versionType": "custom",
              "lessThan": "24.14.37"
            }
          ]
        },
        {
          "vendor": "Google",
          "product": "Looker",
          "platforms": [
            "Google Cloud core instances"
          ],
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "23.6",
              "status": "affected",
              "versionType": "custom",
              "lessThanOrEqual": "24.14"
            }
          ]
        }
      ]
    }
  }
}