{"metadata": {"vulnerability": "CVE-2018-8004", "count": 21, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 15}}, "data": [{"timestamp": "2018-03-09T00:00:00Z", "date_only": false, "value": "2018-03-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2018-8004", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-08-28T00:00:00Z", "date_only": false, "value": "2018-08-28T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / apache", "record": "CVE-2018-8004", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2018-08-28T00:00:00Z", "date_only": false, "value": "2018-08-28T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2018-8004", "record": "GSD-2018-8004", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2018-08-28T00:00:00Z", "date_only": false, "value": "2018-08-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / apache", "record": "CVE-2018-8004", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-08-29T13:00:00Z", "date_only": false, "value": "2018-08-29T13:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2018-8004", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-08-29T13:29:00Z", "date_only": false, "value": "2018-08-29T13:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WHHQ-69JF-G65H", "record": "GHSA-WHHQ-69JF-G65H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2018-08-29T13:29:00Z", "date_only": false, "value": "2018-08-29T13:29:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2018-8004", "record": "UBUNTU-CVE-2018-8004", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-08-29T13:29:00Z", "date_only": false, "value": "2018-08-29T13:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-8004", "record": "GSD-2018-8004", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2018-08-29T13:29:01.873Z", "date_only": false, "value": "2018-08-29T13:29:01.873", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-8004", "record": "FKIE_CVE-2018-8004", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2018-08-31T00:00:00Z", "date_only": true, "value": "2018-08-31", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2018-19513", "record": "CNVD-2018-19513", "field": "submitTime"}, {"timestamp": "2018-09-02T09:57:01Z", "date_only": false, "value": "2018-09-02T09:57:01.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2018-8004", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2018-09-20T00:00:00Z", "date_only": true, "value": "2018-09-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2018-19513", "record": "CNVD-2018-19513", "field": "openTime"}, {"timestamp": "2018-11-08T14:13:00Z", "date_only": false, "value": "2018-11-08T14:13Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-8004", "record": "GSD-2018-8004", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2019-09-22T20:34:10Z", "date_only": false, "value": "2019-09-22T20:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExcreamOnSecurity/277", "record": "CVE-2018-8004", "field": "creation_timestamp", "uuid": "3e6f074b-41fe-4819-8fe5-330771e21327", "content": "Security: HTTP Smuggling, Apache Traffic Server\n\nThis article will give a deep explanation of HTTP Smuggling issues present in CVE-2018-8004. Firstly because there's currently not much informations about it (\"Undergoing Analysis\" at the time of this writing on the previous link). Secondly some time has passed since the official announce (and even more since the availability of fixs in v7), also mostly because I keep receiving demands on what exactly is HTTP Smuggling and how to test/exploit this type of issues, also beacause Smuggling issues are now trending and easier to test thanks for the great stuff of James Kettle (@albinowax).\n\nhttps://regilero.github.io/english/security/2019/10/17/security_apache_traffic_server_http_smuggling/\n#web #owasp #apache", "url": "https://t.me/ExcreamOnSecurity/277", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-05-14T02:01:19Z", "date_only": false, "value": "2022-05-14T02:01:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WHHQ-69JF-G65H", "record": "GHSA-WHHQ-69JF-G65H", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-05-14T02:01:19Z", "date_only": false, "value": "2022-05-14T02:01:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WHHQ-69JF-G65H", "record": "GHSA-WHHQ-69JF-G65H", "field": "modified"}, {"timestamp": "2023-12-13T01:22:34.142Z", "date_only": false, "value": "2023-12-13T01:22:34.142913Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-8004", "record": "GSD-2018-8004", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-05T06:37:59.651Z", "date_only": false, "value": "2024-08-05T06:37:59.651Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2018-8004", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T18:29:48.650Z", "date_only": false, "value": "2024-09-16T18:29:48.650Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2018-8004", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-22T07:38:35Z", "date_only": false, "value": "2026-04-22T07:38:35Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2018-8004", "record": "UBUNTU-CVE-2018-8004", "field": "modified"}, {"timestamp": "2026-06-17T02:04:03.890Z", "date_only": false, "value": "2026-06-17T02:04:03.890", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-8004", "record": "FKIE_CVE-2018-8004", "field": "lastModified"}], "metrics": {"as_of": "2026-10-30T23:27:39.594Z", "anchors": {"origin": {"timestamp": "2018-08-28T00:00:00Z", "date_only": false, "value": "2018-08-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / apache", "record": "CVE-2018-8004", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2018-08-28T00:00:00Z", "date_only": false, "value": "2018-08-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / apache", "record": "CVE-2018-8004", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2019-09-22T20:34:10Z", "date_only": false, "value": "2019-09-22T20:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExcreamOnSecurity/277", "record": "CVE-2018-8004", "field": "creation_timestamp", "uuid": "3e6f074b-41fe-4819-8fe5-330771e21327", "content": "Security: HTTP Smuggling, Apache Traffic Server\n\nThis article will give a deep explanation of HTTP Smuggling issues present in CVE-2018-8004. Firstly because there's currently not much informations about it (\"Undergoing Analysis\" at the time of this writing on the previous link). Secondly some time has passed since the official announce (and even more since the availability of fixs in v7), also mostly because I keep receiving demands on what exactly is HTTP Smuggling and how to test/exploit this type of issues, also beacause Smuggling issues are now trending and easier to test thanks for the great stuff of James Kettle (@albinowax).\n\nhttps://regilero.github.io/english/security/2019/10/17/security_apache_traffic_server_http_smuggling/\n#web #owasp #apache", "url": "https://t.me/ExcreamOnSecurity/277", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 33770050.0, "hours": 9380.569444444445, "days": 390.85706018518516, "min_seconds": 33683650.0, "max_seconds": 33770050.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-08-28T00:00:00Z", "date_only": false, "value": "2018-08-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / apache", "record": "CVE-2018-8004", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2019-09-22T20:34:10Z", "date_only": false, "value": "2019-09-22T20:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExcreamOnSecurity/277", "record": "CVE-2018-8004", "field": "creation_timestamp", "uuid": "3e6f074b-41fe-4819-8fe5-330771e21327", "content": "Security: HTTP Smuggling, Apache Traffic Server\n\nThis article will give a deep explanation of HTTP Smuggling issues present in CVE-2018-8004. Firstly because there's currently not much informations about it (\"Undergoing Analysis\" at the time of this writing on the previous link). Secondly some time has passed since the official announce (and even more since the availability of fixs in v7), also mostly because I keep receiving demands on what exactly is HTTP Smuggling and how to test/exploit this type of issues, also beacause Smuggling issues are now trending and easier to test thanks for the great stuff of James Kettle (@albinowax).\n\nhttps://regilero.github.io/english/security/2019/10/17/security_apache_traffic_server_http_smuggling/\n#web #owasp #apache", "url": "https://t.me/ExcreamOnSecurity/277", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 257988459.594962, "hours": 71663.46099860055, "days": 2985.9775416083567, "min_seconds": 257902059.594962, "max_seconds": 257988459.594962, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2018-08-28T00:00:00Z", "date_only": false, "value": "2018-08-28T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / apache", "record": "CVE-2018-8004", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-30T23:27:39.594Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 224218409.594962, "hours": 62282.891554156115, "days": 2595.1204814231714, "min_seconds": 224218409.594962, "max_seconds": 224218409.594962, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2019-09-22T20:34:10Z", "date_only": false, "value": "2019-09-22T20:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ExcreamOnSecurity/277", "record": "CVE-2018-8004", "field": "creation_timestamp", "uuid": "3e6f074b-41fe-4819-8fe5-330771e21327", "content": "Security: HTTP Smuggling, Apache Traffic Server\n\nThis article will give a deep explanation of HTTP Smuggling issues present in CVE-2018-8004. Firstly because there's currently not much informations about it (\"Undergoing Analysis\" at the time of this writing on the previous link). Secondly some time has passed since the official announce (and even more since the availability of fixs in v7), also mostly because I keep receiving demands on what exactly is HTTP Smuggling and how to test/exploit this type of issues, also beacause Smuggling issues are now trending and easier to test thanks for the great stuff of James Kettle (@albinowax).\n\nhttps://regilero.github.io/english/security/2019/10/17/security_apache_traffic_server_http_smuggling/\n#web #owasp #apache", "url": "https://t.me/ExcreamOnSecurity/277", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-30T23:27:39.594Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}