{"metadata": {"vulnerability": "CVE-2021-4191", "count": 87, "kinds": {"milestone": 6, "sighting": 58, "kev": 11, "other": 12}}, "data": [{"timestamp": "2021-12-30T00:00:00Z", "date_only": false, "value": "2021-12-30T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-28T00:00:00Z", "date_only": false, "value": "2022-02-28T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-189", "record": "CERTFR-2022-AVI-189", "field": "revisions.0.revision_date"}, {"timestamp": "2022-03-04T11:22:38Z", "date_only": false, "value": "2022-03-04T11:22:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NeKaspersky/1928", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "33315b0d-e225-4c51-80ca-e12118b4c0be", "content": "\u0420\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GitLab\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2021-4191 (5.3 \u043f\u043e CVSS), \u0431\u0430\u0433\u0435 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 GitLab Community Edition \u0438 Enterprise Edition. \u0424\u0438\u043a\u0441\u044b \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 14.8.2, 14.7.4 \u0438 14.6.5 25 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0414\u0436\u0435\u0439\u043a\u0430 \u0411\u0435\u0439\u043d\u0441\u0430, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Rapid7, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u0435\u043d \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u043d\u0430 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u043e\u043c \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a API GitLab GraphQL. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0439\u0441\u044f \u0431\u0430\u0433\u043e\u043c, \u043c\u043e\u0436\u0435\u0442 \u0443\u0437\u043d\u0430\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0438\u0445 \u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u044b. \u0421\u043e\u0431\u0440\u0430\u043d\u043d\u044b\u0435 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438, \u0432\u0440\u043e\u0434\u0435 \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0438\u043b\u0438 \u0441\u0442\u0430\u0440\u043e\u0433\u043e \u043d\u0435\u0434\u043e\u0431\u0440\u043e\u0433\u043e \u0431\u0440\u0443\u0442\u0444\u043e\u0440\u0441\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043a \u0443\u0447\u0435\u0442\u043a\u0430\u043c.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e \u0431\u0430\u0433\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u0440\u0443\u0433\u0438\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e CVE-2022-0735 (CVSS: 9.6), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 CI/CD-\u0442\u0430\u0441\u043a\u043e\u0432.\n@NeKaspersky", "url": "https://t.me/NeKaspersky/1928"}, {"timestamp": "2022-03-04T11:50:35Z", "date_only": false, "value": "2022-03-04T11:50:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cKure/8928", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "b5b6f2e5-2e74-4bf1-a36b-511a8140a35d", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 New Security Vulnerability Affects Thousands of GitLab Instances.\n\nTracked as CVE-2021-4191 (CVSS score: 5.3), the medium-severity flaw affects all versions of GitLab Community Edition and Enterprise Edition starting from 13.0 and all versions starting from 14.4 and prior to 14.8.\n\nhttps://thehackernews.com/2022/03/new-security-vulnerability-affects.html", "url": "https://t.me/cKure/8928"}, {"timestamp": "2022-03-04T15:58:10Z", "date_only": false, "value": "2022-03-04T15:58:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/10063", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "8c13b3fc-43ce-4e14-86b6-595ec47b5121", "content": "https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/", "url": "https://t.me/intelexch/10063", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-03-05T10:56:24Z", "date_only": false, "value": "2022-03-05T10:56:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thebugbountyhunter/6068", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "cf22ef46-f436-4279-932e-9262549dbfce", "content": "CVE-2021-4191: GitLab GraphQL API User Enumeration (FIXED)\n\nhttps://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/", "url": "https://t.me/thebugbountyhunter/6068"}, {"timestamp": "2022-03-11T21:12:45Z", "date_only": false, "value": "2022-03-11T21:12:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/gitlab_graphql_user_enum.rb", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "fc2fcfca-39e7-4db7-8ee6-39c5c805beb5", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/gitlab_graphql_user_enum.rb"}, {"timestamp": "2022-03-28T18:53:12Z", "date_only": false, "value": "2022-03-28T18:53:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-28T18:53:12Z", "date_only": false, "value": "2022-03-28T18:53:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2021-4191", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-28T19:15:00Z", "date_only": false, "value": "2022-03-28T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M37Q-W59J-4VR4", "record": "GHSA-M37Q-W59J-4VR4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-03-28T19:15:00Z", "date_only": false, "value": "2022-03-28T19:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-4191", "record": "UBUNTU-CVE-2021-4191", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-28T19:15:00Z", "date_only": false, "value": "2022-03-28T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-4191", "record": "GSD-2021-4191", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-03-28T19:15:08.093Z", "date_only": false, "value": "2022-03-28T19:15:08.093", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-4191", "record": "FKIE_CVE-2021-4191", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-03-29T00:01:10Z", "date_only": false, "value": "2022-03-29T00:01:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M37Q-W59J-4VR4", "record": "GHSA-M37Q-W59J-4VR4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-04-04T18:22:00Z", "date_only": false, "value": "2022-04-04T18:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-4191", "record": "GSD-2021-4191", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-04-05T00:00:49Z", "date_only": false, "value": "2022-04-05T00:00:49Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M37Q-W59J-4VR4", "record": "GHSA-M37Q-W59J-4VR4", "field": "modified"}, {"timestamp": "2022-12-07T05:53:04Z", "date_only": false, "value": "2022-12-07T05:53:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/eaglecyberwashere/50", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "a38cd11b-5fdb-4680-b58b-728322b7ce39", "content": "https://github.com/inspiringz/CVE-2021-22205.git\nCVE-2021-4191: Gitlab Unauthenticated AddUser to Administrator", "url": "https://t.me/eaglecyberwashere/50", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-27T09:58:59Z", "date_only": false, "value": "2023-04-27T09:58:59.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-4191.yaml", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "87ef401b-6bd9-475d-a77d-4a36e19786ee", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-4191.yaml"}, {"timestamp": "2023-05-22T23:03:30Z", "date_only": false, "value": "2023-05-22T23:03:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/1946", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "a2a4ea8c-b571-4dc8-a0f5-0f4988e4e37a", "content": "A new vulnerability (CVE-2021-4191) affects thousands of GitLab instances that could allow a remote, unauthenticated attacker to access user-related information.\n\nhttps://thehackernews.com/2022/03/new-security-vulnerability-affects.html\n\nPatched versions 14.8.2, 14.7.4, 14.6.5 issued for self-managed servers.", "url": "https://t.me/thehackernews/1946"}, {"timestamp": "2023-10-17T22:27:31Z", "date_only": false, "value": "2023-10-17T22:27:31+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-4191", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-17T22:27:31Z", "date_only": false, "value": "2023-10-17T22:27:31+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-4191", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:23:11.598Z", "date_only": false, "value": "2023-12-13T01:23:11.598215Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-4191", "record": "GSD-2021-4191", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T11:17:13.138Z", "date_only": false, "value": "2024-03-06T11:17:13.138Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2021-4191", "record": "BIT-GITLAB-2021-4191", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-03T17:16:04.293Z", "date_only": false, "value": "2024-08-03T17:16:04.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T17:16:04.293Z", "date_only": false, "value": "2024-08-03T17:16:04.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-4191", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-30T00:00:00Z", "date_only": false, "value": "2024-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-30)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "4548a889-2b5f-4ae7-9a1d-3d0632474553", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "097b9471-5f81-497e-93bc-9df9e7938000"}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": false, "value": "2025-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-04)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "8d9993ea-75e6-49b8-b2cd-abbb4aa16631", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "332fd259-3e9c-42bb-b14a-ec2e24f3464e"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-14)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "0f7dd996-9c25-4e48-9628-eb123e59c066"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "ff1e19fa-9ba7-4edb-a3f9-4094fb94a16e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-16)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "9c5865b2-7286-42be-8fd7-9cf856d9ca0a"}, {"timestamp": "2025-02-23T04:10:40Z", "date_only": false, "value": "2025-02-23T04:10:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "c5150496-d984-4b32-bdc3-073047fe8d71"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-07)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "5777a3fb-87bc-4798-846b-1ccf3ef6ebbc"}, {"timestamp": "2025-03-09T00:00:00Z", "date_only": false, "value": "2025-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-09)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "3011edaf-5bfe-42fc-8328-e6a558b0a023"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-13)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "78a3a27d-6312-4c1e-8227-161c1b5929e7", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-20T00:00:00Z", "date_only": false, "value": "2025-03-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-20)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "0612bde2-97a6-4e9e-9cbb-7a223bc5eab3"}, {"timestamp": "2025-04-06T00:00:00Z", "date_only": false, "value": "2025-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-06)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "6c174796-f678-4000-a292-994010f29315"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-09)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "bca29db8-04c0-4321-9544-7509d64311fa", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": false, "value": "2025-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-16)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "203bce0d-79b2-4662-ae74-32599c41a3e7"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-4191", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bd0fc630-97ce-434b-ad8f-66cbc74123c9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-4191", "field": "evidence.0.details.added_date", "uuid": "bd0fc630-97ce-434b-ad8f-66cbc74123c9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "2cf83365-5c9f-4543-a0f2-67e314c06d5d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-4191", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bd0fc630-97ce-434b-ad8f-66cbc74123c9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-4191", "field": "status.status_updated_at", "uuid": "bd0fc630-97ce-434b-ad8f-66cbc74123c9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-29)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "d3405da1-e799-48f6-b259-01fc1a27f4f0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-01T00:00:00Z", "date_only": false, "value": "2025-05-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "3194412d-d66d-4e40-94ab-6122b8f2d53f"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "8ebccda1-9ecb-4a67-8228-5f0f6e165387", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-08-29T00:00:00Z", "date_only": false, "value": "2025-08-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-29)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "8d70d374-ec87-4e75-873a-15037bb4efb4", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-09-11T11:55:23Z", "date_only": false, "value": "2025-09-11T11:55:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tamer1an/d3cf5cdbec1b41112d4ed8bd8bdebcf8", "record": "cve-2021-4191", "field": "creation_timestamp", "uuid": "9de5028b-0cec-4124-af22-b4f5e426993e", "url": "https://gist.github.com/tamer1an/d3cf5cdbec1b41112d4ed8bd8bdebcf8"}, {"timestamp": "2025-09-26T00:00:00Z", "date_only": false, "value": "2025-09-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-26)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "1d03dd7b-4d35-4aa0-af57-7e9c0b25026d"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-01)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "ca96dfe0-b2c2-4d8c-87c2-769a0a5e7103", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-01T00:00:00Z", "date_only": false, "value": "2025-10-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-01)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "b7f021fd-fb2b-437a-acdd-620c99ab2237"}, {"timestamp": "2025-10-09T23:53:19Z", "date_only": false, "value": "2025-10-09T23:53:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=B33A8A99-8B45-5EA7-9323-46A4B09014DA&utm_source=rss&utm_medium=rss", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "98f74f0e-7fc3-4c68-8dd3-3bdc5f198baf", "url": "https://sploitus.com/exploit?id=B33A8A99-8B45-5EA7-9323-46A4B09014DA&utm_source=rss&utm_medium=rss"}, {"timestamp": "2025-10-10T03:00:11Z", "date_only": false, "value": "2025-10-10T03:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pp0tBsjy_E8hLKpXrUoko-WsHosDL2SxogzGUGEN2XHWgEs", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "0d5bd920-6c10-4510-8d22-a2b750edfbe2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-12T00:00:00Z", "date_only": false, "value": "2025-10-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-12)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "d3490ebb-3e24-4e8a-8098-0634e4986123"}, {"timestamp": "2025-10-24T04:50:01Z", "date_only": false, "value": "2025-10-24T04:50:01Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2021-4191", "record": "UBUNTU-CVE-2021-4191", "field": "modified"}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "8b80ad83-b5d2-4f40-b442-f7a7193a835d"}, {"timestamp": "2025-12-24T00:00:00Z", "date_only": false, "value": "2025-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "d9c17156-ca20-4f64-a7ff-0b6381d6448a"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-02)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "3e0650c3-78c1-4360-addf-8abb8de7d68b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-01-02T00:00:00Z", "date_only": false, "value": "2026-01-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "f4a991b5-c964-4c5f-a3ac-12ebc7bbc47a"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-05)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "56d3c90a-6a7b-432c-b791-2d288eadc7c9"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "f91ab702-0262-4fae-b83e-cff97137dd24"}, {"timestamp": "2026-03-21T00:00:00Z", "date_only": false, "value": "2026-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-21)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "bcd7b01e-3171-4bec-94d8-f139142a8295"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-16)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "c9fc3b8d-2d29-4f5d-b796-40b5dda27485"}, {"timestamp": "2026-04-29T00:00:00Z", "date_only": false, "value": "2026-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-29)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "d33a03e0-8c84-43a7-a7f3-d9617572fb17"}, {"timestamp": "2026-05-04T00:00:00Z", "date_only": false, "value": "2026-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-04)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "cb6fbc49-afd3-495f-b92d-810afd91fb81"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": false, "value": "2026-05-07T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-07)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "0c03616e-280f-491a-ac6d-78f83c357fcc"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "2409305b-8ced-4725-bb54-d601c2f7f06f"}, {"timestamp": "2026-05-31T00:00:00Z", "date_only": false, "value": "2026-05-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-31)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "f2397e5d-67a4-4db4-aa17-c1e558448f3b", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T04:19:11.420Z", "date_only": false, "value": "2026-06-17T04:19:11.420", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-4191", "record": "FKIE_CVE-2021-4191", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:18.230Z", "date_only": false, "value": "2026-06-19T12:46:18.230954Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/65ea738e-2c56-4cd5-80b4-8b0b1d6d3f7c", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "fc3f34f5-93a4-4998-ad35-b1fd01ae5e9b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/65ea738e-2c56-4cd5-80b4-8b0b1d6d3f7c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-4191", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "bd0fc630-97ce-434b-ad8f-66cbc74123c9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:25.928Z", "date_only": false, "value": "2026-06-23T14:04:25.928962Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd0fc630-97ce-434b-ad8f-66cbc74123c9", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "9b4b193a-6408-4dba-9b24-5d2dc5f19370", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd0fc630-97ce-434b-ad8f-66cbc74123c9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:45.968Z", "date_only": false, "value": "2026-06-30T09:23:45.968092Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a21839f-195d-4345-bb13-e9ad3f6421fc", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "b4dd3bfa-d2ad-4aa2-8b69-0473602c709d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3a21839f-195d-4345-bb13-e9ad3f6421fc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T10:00:08.705Z", "date_only": false, "value": "2026-06-30T10:00:08.705963Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "1724d8d6-fc5a-4285-b44c-d9341a00baf5"}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-4191", "field": "timestamps.last_seen_at", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": true, "value": "2026-07-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-4191", "field": "evidence.0.details.observation_date", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-20T00:00:00Z", "date_only": false, "value": "2026-07-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-4191", "field": "status.status_updated_at", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-22T01:00:01Z", "date_only": false, "value": "2026-07-22T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-4191", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-29T12:00:13.973Z", "date_only": false, "value": "2026-07-29T12:00:13.973950Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/17535", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "07430b68-2595-4484-a8d9-14528c30ae60", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2021-4191-EXPLOIT*\nGithub: https://github.com/K3ysTr0K3R/CVE-2021-4191-EXPLOIT", "url": "https://t.me/CVEhub/17535"}, {"timestamp": "2026-07-29T12:00:26.396Z", "date_only": false, "value": "2026-07-29T12:00:26.396843Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14348", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "4b80dc2c-9bd9-438f-81ca-9b03d808b98d", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2021-4191_Exploits*\nGithub: https://github.com/Adelittle/CVE-2021-4191_Exploits", "url": "https://t.me/CVEhub/14348"}, {"timestamp": "2026-07-31T00:00:26.551Z", "date_only": false, "value": "2026-07-31T00:00:26.551666Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/14348", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "47bdb8a0-d032-4ce6-8aa2-e53be8972260", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2021-4191_Exploits*\nGithub: https://github.com/Adelittle/CVE-2021-4191_Exploits", "url": "https://t.me/CVEhub/14348", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T00:00:44.805Z", "date_only": false, "value": "2026-07-31T00:00:44.805794Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/17535", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "f5214c0a-f937-4a3b-b3f3-251f3db1587a", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2021-4191-EXPLOIT*\nGithub: https://github.com/K3ysTr0K3R/CVE-2021-4191-EXPLOIT", "url": "https://t.me/CVEhub/17535", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2021-4191", "record": "BIT-GITLAB-2021-4191", "field": "modified"}, {"timestamp": "2026-09-20T10:15:07.566Z", "date_only": false, "value": "2026-09-20T10:15:07.566692Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-19)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "0ab43eed-8599-4f9f-bc3f-4d53babd8b96", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-30T00:00:00Z", "date_only": false, "value": "2026-09-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-30)", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "fe96c75e-856a-4ebc-aa37-63922654512e", "metric_role": "exploitation", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-03T03:48:32.855Z", "anchors": {"origin": {"timestamp": "2022-03-28T18:53:12Z", "date_only": false, "value": "2022-03-28T18:53:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-03-28T18:53:12Z", "date_only": false, "value": "2022-03-28T18:53:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-03-04T15:58:10Z", "date_only": false, "value": "2022-03-04T15:58:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/10063", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "8c13b3fc-43ce-4e14-86b6-595ec47b5121", "content": "https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/", "url": "https://t.me/intelexch/10063", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-10-17T22:27:31Z", "date_only": false, "value": "2023-10-17T22:27:31+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-4191", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 49088059.0, "hours": 13635.571944444444, "days": 568.1488310185185, "min_seconds": 49088059.0, "max_seconds": 49088059.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-28T18:53:12Z", "date_only": false, "value": "2022-03-28T18:53:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-17T22:27:31Z", "date_only": false, "value": "2023-10-17T22:27:31+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-4191", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 49088059.0, "hours": 13635.571944444444, "days": 568.1488310185185, "min_seconds": 49088059.0, "max_seconds": 49088059.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-28T18:53:12Z", "date_only": false, "value": "2022-03-28T18:53:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-17T22:27:31Z", "date_only": false, "value": "2023-10-17T22:27:31+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-4191", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": -2084102.0, "hours": -578.9172222222222, "days": -24.121550925925927, "min_seconds": -2084102.0, "max_seconds": -2084102.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2022-03-28T18:53:12Z", "date_only": false, "value": "2022-03-28T18:53:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-03-04T15:58:10Z", "date_only": false, "value": "2022-03-04T15:58:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/10063", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "8c13b3fc-43ce-4e14-86b6-595ec47b5121", "content": "https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/", "url": "https://t.me/intelexch/10063", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 145184120.855004, "hours": 40328.92245972333, "days": 1680.371769155139, "min_seconds": 145184120.855004, "max_seconds": 145184120.855004, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-28T18:53:12Z", "date_only": false, "value": "2022-03-28T18:53:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-4191", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T03:48:32.855Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 96096061.855004, "hours": 26693.35051527889, "days": 1112.2229381366203, "min_seconds": 96096061.855004, "max_seconds": 96096061.855004, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-10-17T22:27:31Z", "date_only": false, "value": "2023-10-17T22:27:31+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-4191", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "3a21839f-195d-4345-bb13-e9ad3f6421fc", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-03T03:48:32.855Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 147268222.855004, "hours": 40907.83968194556, "days": 1704.493320081065, "min_seconds": 147268222.855004, "max_seconds": 147268222.855004, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-03-04T15:58:10Z", "date_only": false, "value": "2022-03-04T15:58:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/10063", "record": "CVE-2021-4191", "field": "creation_timestamp", "uuid": "8c13b3fc-43ce-4e14-86b6-595ec47b5121", "content": "https://www.rapid7.com/blog/post/2022/03/03/cve-2021-4191-gitlab-graphql-api-user-enumeration-fixed/", "url": "https://t.me/intelexch/10063", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-03T03:48:32.855Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}