{"metadata": {"vulnerability": "CVE-2020-5741", "count": 46, "kinds": {"milestone": 4, "sighting": 15, "kev": 11, "other": 16}, "linked_omitted": 0}, "data": [{"timestamp": "2020-01-06T00:00:00Z", "date_only": false, "value": "2020-01-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-05-08T12:02:59Z", "date_only": false, "value": "2020-05-08T12:02:59.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-05-08T13:15:00Z", "date_only": false, "value": "2020-05-08T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-53FH-QCQ6-XWHV", "record": "GHSA-53FH-QCQ6-XWHV", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2020-05-08T13:15:00Z", "date_only": false, "value": "2020-05-08T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-5741", "record": "GSD-2020-5741", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2020-05-08T13:15:11.137Z", "date_only": false, "value": "2020-05-08T13:15:11.137", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5741", "record": "FKIE_CVE-2020-5741", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-05-09T00:00:00Z", "date_only": true, "value": "2020-05-09", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-35372", "record": "CNVD-2020-35372", "field": "submitTime", "linked_record": true}, {"timestamp": "2020-06-30T00:00:00Z", "date_only": true, "value": "2020-06-30", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-35372", "record": "CNVD-2020-35372", "field": "openTime", "linked_record": true}, {"timestamp": "2020-07-16T15:38:10Z", "date_only": false, "value": "2020-07-16T15:38:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/plex_unpickle_dict_rce.rb", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "e2bfcde8-c33c-4a19-9e37-54455cff6734", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/plex_unpickle_dict_rce.rb"}, {"timestamp": "2020-07-17T21:06:11Z", "date_only": false, "value": "2020-07-17T21:06:11.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / tenable", "record": "CVE-2020-5741", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-03-20T16:59:08Z", "date_only": false, "value": "2021-03-20T16:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2942", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "e5b28c3c-f97a-470e-bd64-2bff3bc02602", "content": "#Malware_analysis\n1. CopperStealer\nhttps://www.proofpoint.com/us/blog/threat-insight/now-you-see-it-now-you-dont-copperstealer-performs-widespread-theft\n2. Examining a Phishing Vector in Plex Media Server (CVE-2020-5740, CVE-2020-5741)\nhttps://medium.com/tenable-techblog/examining-a-phishing-vector-in-plex-media-server-2044edf6bd48\n3. Joker's Latest Ploy\nhttps://www.trendmicro.com/en_us/research/21/c/no-laughing-matter-joker-latest-ploy.html", "url": "https://t.me/CyberSecurityTechnologies/2942", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-12-14T21:50:00Z", "date_only": false, "value": "2021-12-14T21:50Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-5741", "record": "GSD-2020-5741", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-24T17:17:31Z", "date_only": false, "value": "2022-05-24T17:17:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-53FH-QCQ6-XWHV", "record": "GHSA-53FH-QCQ6-XWHV", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2020-5741", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "34c86937-bfb9-495c-a872-a4e37dd9800b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": true, "value": "2023-03-10", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5741", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2020-5741", "field": "evidence.0.details.added_date", "uuid": "34c86937-bfb9-495c-a872-a4e37dd9800b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": true, "value": "2023-03-10", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "evidence.0.details.date_added", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2020-5741", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "34c86937-bfb9-495c-a872-a4e37dd9800b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "status.status_updated_at", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2020-5741", "field": "status.status_updated_at", "uuid": "34c86937-bfb9-495c-a872-a4e37dd9800b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5741", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2020-5741 added to CISA KEV"}, {"timestamp": "2023-03-31T00:00:00Z", "date_only": true, "value": "2023-03-31", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "evidence.0.details.due_date", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "dacfc98a-ea0a-4294-b087-cd6144651fd7"}, {"timestamp": "2023-12-03T13:12:57Z", "date_only": false, "value": "2023-12-03T13:12:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/939", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "282624bd-13e8-4f8d-a051-d8db1d38772a", "content": "#ExploitObserverAlert\n\nCVE-2020-5741\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2020-5741. Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.\n\nFIRST-EPSS: 0.179730000\nNVD-IS: 5.9\nNVD-ES: 1.2", "url": "https://t.me/arpsyndicate/939"}, {"timestamp": "2023-12-13T01:22:03.136Z", "date_only": false, "value": "2023-12-13T01:22:03.136472Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-5741", "record": "GSD-2020-5741", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-04T08:39:25.914Z", "date_only": false, "value": "2024-08-04T08:39:25.914Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-5741", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:33:54.938Z", "date_only": false, "value": "2024-12-24T20:33:54.938209Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971775", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "c3f3d650-c7a5-40f8-b303-e28c498e2f42", "url": "https://feedsin.space/feed/CISAKevBot/items/2971775"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "8c9a53b0-4fcb-4a89-863e-62bff285c1be"}, {"timestamp": "2025-02-06T20:28:24.611Z", "date_only": false, "value": "2025-02-06T20:28:24.611136Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5741", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-06T20:28:24.611Z", "date_only": false, "value": "2025-02-06T20:28:24.611136Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5741", "record": "FKIE_CVE-2020-5741", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-23T02:10:27Z", "date_only": false, "value": "2025-02-23T02:10:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "90461210-253f-42bc-a63d-9f32eb1a9983"}, {"timestamp": "2025-02-23T04:10:29Z", "date_only": false, "value": "2025-02-23T04:10:29.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "40e03a55-e0ea-4635-82c8-2612dc230cb7"}, {"timestamp": "2025-07-23T22:50:16.613Z", "date_only": false, "value": "2025-07-23T22:50:16.613850Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luo463k6usl2", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "a435ab07-65f6-4722-a27d-42257d5d6a3f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luo463k6usl2"}, {"timestamp": "2025-08-15T13:12:01.329Z", "date_only": false, "value": "2025-08-15T13:12:01.329405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lwgwl6jngc2v", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "bc4d1c4d-db65-496f-876f-8e1039d03dd0", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lwgwl6jngc2v"}, {"timestamp": "2025-10-21T23:35:43.641Z", "date_only": false, "value": "2025-10-21T23:35:43.641Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:35:43.641Z", "date_only": false, "value": "2025-10-21T23:35:43.641Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2020-5741", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:31:55Z", "date_only": false, "value": "2025-10-22T00:31:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-53FH-QCQ6-XWHV", "record": "GHSA-53FH-QCQ6-XWHV", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:27:04.042Z", "date_only": false, "value": "2026-02-02T12:27:04.042572Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8dd94f0-3909-40e8-8f73-19b891ff7375", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "981d7eae-b0a8-4092-b9b2-832fd7fa54cd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8dd94f0-3909-40e8-8f73-19b891ff7375", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T03:22:09.140Z", "date_only": false, "value": "2026-06-17T03:22:09.140", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-5741", "record": "FKIE_CVE-2020-5741", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:58.774Z", "date_only": false, "value": "2026-06-19T12:46:58.774073Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb5832ae-2111-4c4c-85c6-4046e481b556", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "06a4766d-1166-4852-a60c-f6810e357865", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eb5832ae-2111-4c4c-85c6-4046e481b556", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2020-5741", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "34c86937-bfb9-495c-a872-a4e37dd9800b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:37.792Z", "date_only": false, "value": "2026-06-23T14:05:37.792967Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/34c86937-bfb9-495c-a872-a4e37dd9800b", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "00641693-926e-4a68-848a-100e95b0f48d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/34c86937-bfb9-495c-a872-a4e37dd9800b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:57.776Z", "date_only": false, "value": "2026-09-01T17:00:57.776635Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2646", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "8b19b0bc-9ffe-4e3a-ab27-5ad5cc3bf1f4", "content": "Malware analysis\n1. CopperStealer\nhttps://www.proofpoint.com/us/blog/threat-insight/now-you-see-it-now-you-dont-copperstealer-performs-widespread-theft\n2. Examining a Phishing Vector in Plex Media Server (CVE-2020-5740, CVE-2020-5741)\nhttps://medium.com/tenable-techblog/examining-a-phishing-vector-in-plex-media-server-2044edf6bd48\n3. Joker's Latest Ploy\nhttps://www.trendmicro.com/en_us/research/21/c/no-laughing-matter-joker-latest-ploy.html\n\nBlue Team Techniques\n1. Hunting for Lateral Movement using Event Query Language\ud83d\ude01\nhttps://www.elastic.co/blog/hunting-for-lateral-movement-using-event-query-language\n2. Detection capabilities for recent F5 BIG-IP/BIG-IQ iControl REST API vulnerabilities CVE-2021-22986\ud83e\udd1e\ud83c\udffd\nhttps://research.nccgroup.com/2021/03/18/rift-detection-capabilities-for-recent-f5-big-ip-big-iq-icontrol-rest-api-vulnerabilities-cve-2021-22986\n\nCloud Security\nApproaches for authenticating external applications in a machine-to-machine scenario. Determining the best approach\nhttps://aws.amazon.com/ru/blogs/security/approaches-for-authenticating-external-applications-in-a-machine-to-machine-scenario\n\nRed Team Tactics\n1. How I hacked Facebook, part 2\nhttps://infosecwriteups.com/how-i-hacked-facebook-part-two-ffab96d57b19\n2. Bypass cloudflare with incorrect url encoding \n\nalert() blocked %2sscript%2ualert()%2s/script%2u -xss popup\n\n3. Bypassing VPN MFA During a Pentest via Duo Inline Self-Enrollment\nhttps://infosecwriteups.com/bypassing-vpn-mfa-during-a-pentest-via-duo-inline-self-enrollment-78be6e985b24", "url": "https://t.me/cissp/2646"}, {"timestamp": "2026-09-11T15:00:05.851Z", "date_only": false, "value": "2026-09-11T15:00:05.851700Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2646", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "da962c96-5bbf-4610-9965-1e4e0ed477d5", "content": "Malware analysis\n1. CopperStealer\nhttps://www.proofpoint.com/us/blog/threat-insight/now-you-see-it-now-you-dont-copperstealer-performs-widespread-theft\n2. Examining a Phishing Vector in Plex Media Server (CVE-2020-5740, CVE-2020-5741)\nhttps://medium.com/tenable-techblog/examining-a-phishing-vector-in-plex-media-server-2044edf6bd48\n3. Joker's Latest Ploy\nhttps://www.trendmicro.com/en_us/research/21/c/no-laughing-matter-joker-latest-ploy.html\n\nBlue Team Techniques\n1. Hunting for Lateral Movement using Event Query Language\ud83d\ude01\nhttps://www.elastic.co/blog/hunting-for-lateral-movement-using-event-query-language\n2. Detection capabilities for recent F5 BIG-IP/BIG-IQ iControl REST API vulnerabilities CVE-2021-22986\ud83e\udd1e\ud83c\udffd\nhttps://research.nccgroup.com/2021/03/18/rift-detection-capabilities-for-recent-f5-big-ip-big-iq-icontrol-rest-api-vulnerabilities-cve-2021-22986\n\nCloud Security\nApproaches for authenticating external applications in a machine-to-machine scenario. Determining the best approach\nhttps://aws.amazon.com/ru/blogs/security/approaches-for-authenticating-external-applications-in-a-machine-to-machine-scenario\n\nRed Team Tactics\n1. How I hacked Facebook, part 2\nhttps://infosecwriteups.com/how-i-hacked-facebook-part-two-ffab96d57b19\n2. Bypass cloudflare with incorrect url encoding \n\nalert() blocked %2sscript%2ualert()%2s/script%2u -xss popup\n\n3. Bypassing VPN MFA During a Pentest via Duo Inline Self-Enrollment\nhttps://infosecwriteups.com/bypassing-vpn-mfa-during-a-pentest-via-duo-inline-self-enrollment-78be6e985b24", "url": "https://t.me/cissp/2646", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T16:04:36.387Z", "anchors": {"origin": {"timestamp": "2020-05-08T12:02:59Z", "date_only": false, "value": "2020-05-08T12:02:59.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-05-08T12:02:59Z", "date_only": false, "value": "2020-05-08T12:02:59.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-03-20T16:59:08Z", "date_only": false, "value": "2021-03-20T16:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2942", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "e5b28c3c-f97a-470e-bd64-2bff3bc02602", "content": "#Malware_analysis\n1. CopperStealer\nhttps://www.proofpoint.com/us/blog/threat-insight/now-you-see-it-now-you-dont-copperstealer-performs-widespread-theft\n2. Examining a Phishing Vector in Plex Media Server (CVE-2020-5740, CVE-2020-5741)\nhttps://medium.com/tenable-techblog/examining-a-phishing-vector-in-plex-media-server-2044edf6bd48\n3. Joker's Latest Ploy\nhttps://www.trendmicro.com/en_us/research/21/c/no-laughing-matter-joker-latest-ploy.html", "url": "https://t.me/CyberSecurityTechnologies/2942", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 89467021.0, "hours": 24851.950277777778, "days": 1035.4979282407407, "min_seconds": 89467021.0, "max_seconds": 89553421.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-05-08T12:02:59Z", "date_only": false, "value": "2020-05-08T12:02:59.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 89467021.0, "hours": 24851.950277777778, "days": 1035.4979282407407, "min_seconds": 89467021.0, "max_seconds": 89553421.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-05-08T12:02:59Z", "date_only": false, "value": "2020-05-08T12:02:59.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 27320169.0, "hours": 7588.935833333333, "days": 316.2056597222222, "min_seconds": 27320169.0, "max_seconds": 27320169.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-05-08T12:02:59Z", "date_only": false, "value": "2020-05-08T12:02:59.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-03-20T16:59:08Z", "date_only": false, "value": "2021-03-20T16:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2942", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "e5b28c3c-f97a-470e-bd64-2bff3bc02602", "content": "#Malware_analysis\n1. CopperStealer\nhttps://www.proofpoint.com/us/blog/threat-insight/now-you-see-it-now-you-dont-copperstealer-performs-widespread-theft\n2. Examining a Phishing Vector in Plex Media Server (CVE-2020-5740, CVE-2020-5741)\nhttps://medium.com/tenable-techblog/examining-a-phishing-vector-in-plex-media-server-2044edf6bd48\n3. Joker's Latest Ploy\nhttps://www.trendmicro.com/en_us/research/21/c/no-laughing-matter-joker-latest-ploy.html", "url": "https://t.me/CyberSecurityTechnologies/2942", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 205819297.387815, "hours": 57172.02705217083, "days": 2382.1677938404514, "min_seconds": 205819297.387815, "max_seconds": 205819297.387815, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-05-08T12:02:59Z", "date_only": false, "value": "2020-05-08T12:02:59.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-5741", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T16:04:36.387Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 116352276.387815, "hours": 32320.076774393056, "days": 1346.6698655997106, "min_seconds": 116265876.387815, "max_seconds": 116352276.387815, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-03-10T00:00:00Z", "date_only": false, "value": "2023-03-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2020-5741", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e8dd94f0-3909-40e8-8f73-19b891ff7375", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T16:04:36.387Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 178499128.387815, "hours": 49583.0912188375, "days": 2065.962134118229, "min_seconds": 178499128.387815, "max_seconds": 178499128.387815, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-03-20T16:59:08Z", "date_only": false, "value": "2021-03-20T16:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/2942", "record": "CVE-2020-5741", "field": "creation_timestamp", "uuid": "e5b28c3c-f97a-470e-bd64-2bff3bc02602", "content": "#Malware_analysis\n1. CopperStealer\nhttps://www.proofpoint.com/us/blog/threat-insight/now-you-see-it-now-you-dont-copperstealer-performs-widespread-theft\n2. Examining a Phishing Vector in Plex Media Server (CVE-2020-5740, CVE-2020-5741)\nhttps://medium.com/tenable-techblog/examining-a-phishing-vector-in-plex-media-server-2044edf6bd48\n3. Joker's Latest Ploy\nhttps://www.trendmicro.com/en_us/research/21/c/no-laughing-matter-joker-latest-ploy.html", "url": "https://t.me/CyberSecurityTechnologies/2942", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T16:04:36.387Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}