{"metadata": {"vulnerability": "CVE-2020-37281", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2020-08-23T00:00:00Z", "date_only": false, "value": "2020-08-23T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2020-37281", "field": "containers.cna.datePublic"}, {"timestamp": "2026-10-14T13:07:15.883Z", "date_only": false, "value": "2026-10-14T13:07:15.883Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-37281", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-14T14:16:28.167Z", "date_only": false, "value": "2026-10-14T14:16:28.167Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-37281", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T14:16:28.167Z", "date_only": false, "value": "2026-10-14T14:16:28.167Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2020-37281", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T15:16:59Z", "date_only": false, "value": "2026-10-14T15:16:59Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VH3J-3QJC-G47J", "record": "GHSA-VH3J-3QJC-G47J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T15:16:59.370Z", "date_only": false, "value": "2026-10-14T15:16:59.370", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-37281", "record": "FKIE_CVE-2020-37281", "field": "published"}, {"timestamp": "2026-10-14T15:32:22Z", "date_only": false, "value": "2026-10-14T15:32:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VH3J-3QJC-G47J", "record": "GHSA-VH3J-3QJC-G47J", "field": "published"}, {"timestamp": "2026-10-14T15:32:22Z", "date_only": false, "value": "2026-10-14T15:32:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VH3J-3QJC-G47J", "record": "GHSA-VH3J-3QJC-G47J", "field": "modified"}, {"timestamp": "2026-10-14T16:07:45.963Z", "date_only": false, "value": "2026-10-14T16:07:45.963312Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwkvd5s22l", "record": "CVE-2020-37281", "field": "creation_timestamp", "uuid": "1482f12d-f031-4ad1-86fb-83a0f019503c", "content": "\ud83d\udea8 CVE-2020-37281 \u2014 CVSS 9.2 CRITICAL\n\nGravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthe...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2020-37281\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxtwkvd5s22l"}, {"timestamp": "2026-10-14T16:09:27.084Z", "date_only": false, "value": "2026-10-14T16:09:27.084463Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-37281", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T16:09:27.084Z", "date_only": false, "value": "2026-10-14T16:09:27.084463Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-37281", "record": "FKIE_CVE-2020-37281", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T16:09:42.670Z", "date_only": false, "value": "2026-10-14T16:09:42.670Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-37281", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T16:09:42.670Z", "date_only": false, "value": "2026-10-14T16:09:42.670Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-37281", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T16:20:05.959Z", "date_only": false, "value": "2026-10-14T16:20:05.959316Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtxawyxqd2z", "record": "CVE-2020-37281", "field": "creation_timestamp", "uuid": "510033bc-e14d-4d51-a7e4-3b6f7f1688e6", "content": "CVE-2020-37281 - gravitee api management\nThe Gravitee API Management platform (up to version 4.12.22) uses a default secret key for its JSON Web Token authentication. Because this key is known, an attacker can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gravitee #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxtxawyxqd2z"}, {"timestamp": "2026-10-14T19:01:06.463Z", "date_only": false, "value": "2026-10-14T19:01:06.463095Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440804678321509", "record": "CVE-2020-37281", "field": "creation_timestamp", "uuid": "8e4bd0d8-a79b-4d70-a529-d2ea55568c07", "content": "CVE-2020-37281 Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging JWTs signed with the shipped default jwt.secret. Attackers knowing an existing user ID can sign an HS256 token with that subject and present it as a bearer token to the Management API, impersonating administrators to gain full platform control.\nhttps://www.cve.org/CVERecord?id=CVE-2020-37281https://github.com/gravitee-io/issues/issues/4204https://github.com/gravitee-io/gravitee-api-management/blob/4.12.22/gravitee-apim-rest-api/gravitee-apim-rest-api-standalone/gravitee-apim-rest-api-standalone-distribution/src/main/resources/config/gravitee.yml#L636-L637https://github.com/gravitee-io/gravitee-api-management/blob/4.12.22/gravitee-apim-rest-api/gravitee-apim-rest-api-management/gravitee-apim-rest-api-management-security/src/main/java/io/gravitee/rest/api/management/security/config/BasicSecurityConfigurerAdapter.java#L157-L175https://github.com/gravitee-io/gravitee-api-management/blob/4.12.22/helm/values.yaml#L103https://github.com/gravitee-io/gravitee-docs/blob/master/pages/apim/3.x/how-tos/how-to-general-configuration.adochttps://www.vulncheck.com/advisories/gravitee-api-management-through-4.12.22-default-jwt-secret-authentication-bypass#Gravitee #GraviteeAPIManagement#CVE_2020_37281#bot", "url": "https://infosec.exchange/users/cve/statuses/117440804678321509"}, {"timestamp": "2026-10-15T15:12:54.040Z", "date_only": false, "value": "2026-10-15T15:12:54.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-37281", "record": "FKIE_CVE-2020-37281", "field": "lastModified"}]}