{"metadata": {"vulnerability": "CVE-2018-1270", "count": 91, "kinds": {"milestone": 8, "sighting": 3, "kev": 0, "other": 80}}, "data": [{"timestamp": "2017-09-21T00:00:00Z", "date_only": false, "value": "2017-09-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2017-09-21T00:00:00Z", "date_only": false, "value": "2017-09-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2017-09-21T00:00:00Z", "date_only": false, "value": "2017-09-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2017-09-21T00:00:00Z", "date_only": false, "value": "2017-09-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2017-12-06T00:00:00Z", "date_only": false, "value": "2017-12-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2018-1270", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-01-31T00:00:00Z", "date_only": false, "value": "2018-01-31T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2018-01-31T00:00:00Z", "date_only": false, "value": "2018-01-31T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2018-02-23T00:00:00Z", "date_only": false, "value": "2018-02-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2018-02-23T00:00:00Z", "date_only": false, "value": "2018-02-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2018-02-23T00:00:00Z", "date_only": false, "value": "2018-02-23T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2018-02-23T00:00:00Z", "date_only": false, "value": "2018-02-23T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2018-02-26T00:00:00Z", "date_only": false, "value": "2018-02-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2018-02-26T00:00:00Z", "date_only": false, "value": "2018-02-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2018-02-26T00:00:00Z", "date_only": false, "value": "2018-02-26T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2018-02-26T00:00:00Z", "date_only": false, "value": "2018-02-26T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2018-04-05T00:00:00Z", "date_only": false, "value": "2018-04-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_update_date.data.2.date"}, {"timestamp": "2018-04-05T00:00:00Z", "date_only": false, "value": "2018-04-05T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / dell", "record": "CVE-2018-1270", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2018-04-05T00:00:00Z", "date_only": false, "value": "2018-04-05T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2018-1270", "record": "GSD-2018-1270", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2018-04-05T00:00:00Z", "date_only": false, "value": "2018-04-05T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2018-04-05T00:00:00Z", "date_only": false, "value": "2018-04-05T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2018-04-05T00:00:00Z", "date_only": false, "value": "2018-04-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / dell", "record": "CVE-2018-1270", "field": "containers.cna.datePublic"}, {"timestamp": "2018-04-05T00:00:00Z", "date_only": false, "value": "2018-04-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2018-04-05T00:00:00Z", "date_only": false, "value": "2018-04-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2018-04-06T00:00:00Z", "date_only": false, "value": "2018-04-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_release_date.data.0.date"}, {"timestamp": "2018-04-06T00:00:00Z", "date_only": true, "value": "2018-04-06", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2018-1270", "record": "GSD-2018-1270", "field": "namespaces.gitlab.com.advisories.1.pubdate"}, {"timestamp": "2018-04-06T13:00:00Z", "date_only": false, "value": "2018-04-06T13:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2018-1270", "field": "cveMetadata.datePublished"}, {"timestamp": "2018-04-06T13:29:00Z", "date_only": false, "value": "2018-04-06T13:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P5HG-3XM3-GCJG", "record": "GHSA-P5HG-3XM3-GCJG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2018-04-06T13:29:00Z", "date_only": false, "value": "2018-04-06T13:29:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2018-1270", "record": "UBUNTU-CVE-2018-1270", "field": "published"}, {"timestamp": "2018-04-06T13:29:00Z", "date_only": false, "value": "2018-04-06T13:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-1270", "record": "GSD-2018-1270", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2018-04-06T13:29:00.453Z", "date_only": false, "value": "2018-04-06T13:29:00.453000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_release_date.data.5.date"}, {"timestamp": "2018-04-06T13:29:00.453Z", "date_only": false, "value": "2018-04-06T13:29:00.453", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-1270", "record": "FKIE_CVE-2018-1270", "field": "published"}, {"timestamp": "2018-04-09T00:00:00Z", "date_only": false, "value": "2018-04-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2018-04-09T00:00:00Z", "date_only": false, "value": "2018-04-09T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2018-04-09T19:00:00Z", "date_only": false, "value": "2018-04-09T19:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2018-04-09T19:00:00Z", "date_only": false, "value": "2018-04-09T19:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.4.release_date"}, {"timestamp": "2018-04-10T00:00:00Z", "date_only": true, "value": "2018-04-10", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2018-07295", "record": "CNVD-2018-07295", "field": "openTime"}, {"timestamp": "2018-04-10T00:00:00Z", "date_only": true, "value": "2018-04-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2018-07295", "record": "CNVD-2018-07295", "field": "submitTime"}, {"timestamp": "2018-04-24T00:00:00Z", "date_only": false, "value": "2018-04-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2018-04-24T00:00:00Z", "date_only": false, "value": "2018-04-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2018-05-09T00:00:00Z", "date_only": false, "value": "2018-05-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2018-05-09T00:00:00Z", "date_only": false, "value": "2018-05-09T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2018-05-11T00:00:00Z", "date_only": false, "value": "2018-05-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2018-05-11T00:00:00Z", "date_only": false, "value": "2018-05-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2018-05-14T00:00:00Z", "date_only": false, "value": "2018-05-14T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_update_date.data.3.date"}, {"timestamp": "2018-07-22T00:00:00Z", "date_only": false, "value": "2018-07-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2018-07-22T00:00:00Z", "date_only": false, "value": "2018-07-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2018-07-23T00:00:00Z", "date_only": false, "value": "2018-07-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2018-07-23T00:00:00Z", "date_only": false, "value": "2018-07-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2018-10-17T00:00:00Z", "date_only": true, "value": "2018-10-17", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2018-1270", "record": "GSD-2018-1270", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2018-10-17T19:28:22Z", "date_only": false, "value": "2018-10-17T19:28:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2018-10-17T19:28:22Z", "date_only": false, "value": "2018-10-17T19:28:22+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2018-10-17T19:28:22Z", "date_only": false, "value": "2018-10-17T19:28:22+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2018-10-17T19:28:22Z", "date_only": false, "value": "2018-10-17T19:28:22+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2018-10-17T19:28:22Z", "date_only": false, "value": "2018-10-17T19:28:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "document.tracking.initial_release_date"}, {"timestamp": "2018-10-17T19:28:22Z", "date_only": false, "value": "2018-10-17T19:28:22+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "document.tracking.initial_release_date"}, {"timestamp": "2018-10-17T20:05:59Z", "date_only": false, "value": "2018-10-17T20:05:59Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P5HG-3XM3-GCJG", "record": "GHSA-P5HG-3XM3-GCJG", "field": "published"}, {"timestamp": "2018-10-18T03:51:21Z", "date_only": false, "value": "2018-10-18T03:51:21", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_release_date.data.4.date"}, {"timestamp": "2018-11-15T11:16:14Z", "date_only": false, "value": "2018-11-15T11:16:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cRyPtHoN_INFOSEC_DE/144", "record": "CVE-2018-1270", "field": "creation_timestamp", "uuid": "7cbd8d02-ea7d-4418-8021-f1ca8d04e14a", "content": "Patchday: Schwerwiegende Sicherheitsl\u00fccke in SAP HANA Streaming Analytics\n\nSAP hat Updates ver\u00f6ffentlicht, die unter anderem eine kritische Schwachstelle im Software-Portfolio des Herstellers schlie\u00dfen.\n\nAm Patchday in diesem Monat hat der Softwarehersteller SAP elf Sicherheitshinweise ver\u00f6ffentlicht. Besonders Nutzer von SAP HANA Streaming Analytics sollten die verf\u00fcgbaren Updates installieren.\n\nAngreifer k\u00f6nnten Systeme mit der Software mittels einfachen Anfragen aus der Ferne attackieren, um Schadcode auszuf\u00fchren. Die Schwachstelle (CVE-2018-1270, CVE-2018-1275) steckt in verschiedenen Versionen des Spring Framework, dass SAP HANA Streaming Analytics nutzt. SAP stuft den Bedrohungsgrad der L\u00fccke als \"kritisch\" ein.\n\nSchwachstellen in BusinessObjects BI Platform Server, Disclosure Management, Fiori Client und SAP_ABA sind mit \"hoch\" eingestuft. Die betroffenen Versionen der Software kann man im Sicherheitscenter von SAP einsehen.\nNutzen Angreifer die L\u00fccken aus, k\u00f6nnten sie unter anderem Systeme via DoS-Attacke lahmlegen. Sechs L\u00fccken in weiterer Software wie NetWeaver sind mit dem Angriffsrisiko \"mittel\" versehen.\n\nheise.de\n\n\ud83d\udce1 @cRyPtHoN_INFOSEC_DE", "url": "https://t.me/cRyPtHoN_INFOSEC_DE/144"}, {"timestamp": "2019-07-03T00:00:00Z", "date_only": true, "value": "2019-07-03", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2018-1270", "record": "GSD-2018-1270", "field": "namespaces.gitlab.com.advisories.1.date"}, {"timestamp": "2020-08-31T00:00:00Z", "date_only": false, "value": "2020-08-31T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_update_date.data.0.date"}, {"timestamp": "2021-10-20T10:38:02Z", "date_only": false, "value": "2021-10-20T10:38:02.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / dell", "record": "CVE-2018-1270", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-10-21T00:00:00Z", "date_only": true, "value": "2021-10-21", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2018-1270", "record": "GSD-2018-1270", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-10-21T00:00:00Z", "date_only": false, "value": "2021-10-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_update_date.data.5.date"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-03-25T00:00:00Z", "date_only": false, "value": "2022-03-25T00:00:00+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-06-23T16:31:00Z", "date_only": false, "value": "2022-06-23T16:31Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-1270", "record": "GSD-2018-1270", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-07T00:00:00Z", "date_only": false, "value": "2023-11-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-11-07T02:55:54.230Z", "date_only": false, "value": "2023-11-07T02:55:54.230000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "sources_update_date.data.4.date"}, {"timestamp": "2023-12-06T12:28:09Z", "date_only": false, "value": "2023-12-06T12:28:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1480", "record": "CVE-2018-1270", "field": "creation_timestamp", "uuid": "17f71054-0922-4d0c-a82b-4e6d458e2b5b", "content": "#ExploitObserverAlert\n\nCVE-2018-1270\n\nDESCRIPTION: Exploit Observer has 60 entries related to CVE-2018-1270. Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.\n\nFIRST-EPSS: 0.859620000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1480"}, {"timestamp": "2023-12-13T01:22:37.342Z", "date_only": false, "value": "2023-12-13T01:22:37.342226Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-1270", "record": "GSD-2018-1270", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-03T12:23:41.657Z", "date_only": false, "value": "2024-01-03T12:23:41.657000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-201804-1676", "record": "VAR-201804-1676", "field": "last_update_date"}, {"timestamp": "2024-02-29T23:00:00Z", "date_only": false, "value": "2024-02-29T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0528", "record": "WID-SEC-W-2024-0528", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-02-29T23:00:00Z", "date_only": false, "value": "2024-02-29T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0528", "record": "WID-SEC-W-2024-0528", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-02-29T23:00:00Z", "date_only": false, "value": "2024-02-29T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0528", "record": "WID-SEC-W-2024-0528", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-02-29T23:00:00Z", "date_only": false, "value": "2024-02-29T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0528", "record": "WID-SEC-W-2024-0528", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-05T03:51:48.998Z", "date_only": false, "value": "2024-08-05T03:51:48.998Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2018-1270", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:05:58.480Z", "date_only": false, "value": "2024-08-15T18:05:58.480+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0528", "record": "WID-SEC-W-2024-0528", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-25T12:09:18Z", "date_only": false, "value": "2024-11-25T12:09:18+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-11-25T12:09:18Z", "date_only": false, "value": "2024-11-25T12:09:18+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-25T12:09:18Z", "date_only": false, "value": "2024-11-25T12:09:18+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2018_2939", "record": "RHSA-2018_2939", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-01-31T18:51:12Z", "date_only": false, "value": "2025-01-31T18:51:12Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P5HG-3XM3-GCJG", "record": "GHSA-P5HG-3XM3-GCJG", "field": "modified"}, {"timestamp": "2025-01-31T19:15:57Z", "date_only": false, "value": "2025-01-31T19:15:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3675", "record": "CVE-2018-1270", "field": "creation_timestamp", "uuid": "284c716d-652a-47fc-924d-32413356f885", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2018-1275\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.\n\ud83d\udccf Published: 2018-10-17T20:28:00Z\n\ud83d\udccf Modified: 2025-01-31T19:03:33Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2018-1275\n2. https://github.com/spring-projects/spring-framework/commit/0009806debb578e884f6dc98bd1f2dc668020021\n3. https://github.com/spring-projects/spring-framework/commit/e0de9126ed8cf25cf141d3e66420da94e350708a\n4. https://access.redhat.com/errata/RHSA-2018:1320\n5. https://access.redhat.com/errata/RHSA-2018:2939\n6. https://github.com/spring-projects/spring-framework\n7. https://lists.apache.org/thread.html/4ed49b103f64a0cecb38064f26cbf1389afc12124653da2d35166dbe@%3Cissues.activemq.apache.org%3E\n8. https://lists.apache.org/thread.html/ab825fcade0b49becfa30235b3d54f4a51bb74ea96b6c9adb5d1378c@%3Cissues.activemq.apache.org%3E\n9. https://lists.apache.org/thread.html/dcf8599b80e43a6b60482607adb76c64672772dc2d9209ae2170f369@%3Cissues.activemq.apache.org%3E\n10. https://pivotal.io/security/cve-2018-1275\n11. https://web.archive.org/web/20190901081835/http://www.securitytracker.com/id/1041301\n12. https://web.archive.org/web/20200227033125/http://www.securityfocus.com/bid/103771\n13. https://www.oracle.com/security-alerts/cpujul2020.html\n14. https://www.oracle.com/security-alerts/cpuoct2021.html\n15. https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html\n16. https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html\n17. http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html\n18. http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/3675"}, {"timestamp": "2025-07-16T04:53:25Z", "date_only": false, "value": "2025-07-16T04:53:25Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2018-1270", "record": "UBUNTU-CVE-2018-1270", "field": "modified"}, {"timestamp": "2026-08-04T20:58:42Z", "date_only": false, "value": "2026-08-04T20:58:42+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-08-04T20:58:42Z", "date_only": false, "value": "2026-08-04T20:58:42+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "document.tracking.generator.date"}, {"timestamp": "2026-08-04T20:58:42Z", "date_only": false, "value": "2026-08-04T20:58:42+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2018:2939", "record": "RHSA-2018:2939", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T21:04:14.290Z", "date_only": false, "value": "2026-10-08T21:04:14.290216Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-1270", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-08T21:04:14.290Z", "date_only": false, "value": "2026-10-08T21:04:14.290216Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-1270", "record": "FKIE_CVE-2018-1270", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-08T21:13:46.855Z", "date_only": false, "value": "2026-10-08T21:13:46.855Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2018-1270", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-08T21:13:46.855Z", "date_only": false, "value": "2026-10-08T21:13:46.855Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2018-1270", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-08T22:16:46.473Z", "date_only": false, "value": "2026-10-08T22:16:46.473", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-1270", "record": "FKIE_CVE-2018-1270", "field": "lastModified"}]}
