{"metadata": {"vulnerability": "CVE-2022-2992", "count": 38, "kinds": {"milestone": 6, "sighting": 17, "kev": 0, "other": 15}}, "data": [{"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-08-31T00:00:00Z", "date_only": false, "value": "2022-08-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-782", "record": "CERTFR-2022-AVI-782", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2022-10-09T14:07:43Z", "date_only": false, "value": "2022-10-09T14:07:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/25958", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "03e688ef-7759-4918-aa57-dc9a204d77c4", "content": "https://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/intelexch/25958", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-10-10T07:03:55Z", "date_only": false, "value": "2022-10-10T07:03:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1026", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "c713942f-6d67-4987-8a15-dd10f7282d4e", "content": "CVE-2022-2992\nAuthenticated Remote Command Execution in Gitlab via GitHub import.\n*\nA vulnerability in GitLab CE/EE affecting all versions from 11.10 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.\nExploit and Readme\n\n#exploit", "url": "https://t.me/proxy_bar/1026", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-10-11T02:32:29Z", "date_only": false, "value": "2022-10-11T02:32:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/6946", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "6268bb61-9610-4e11-a865-8313c1964f90", "content": "#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/CyberSecurityTechnologies/6946", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-10-17T16:15:00Z", "date_only": false, "value": "2022-10-17T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M7F3-552R-PF23", "record": "GHSA-M7F3-552R-PF23", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-10-17T16:15:00Z", "date_only": false, "value": "2022-10-17T16:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2992", "record": "UBUNTU-CVE-2022-2992", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-17T16:15:00Z", "date_only": false, "value": "2022-10-17T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-2992", "record": "GSD-2022-2992", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-10-17T16:15:21.640Z", "date_only": false, "value": "2022-10-17T16:15:21.640", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2992", "record": "FKIE_CVE-2022-2992", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-17T19:00:27Z", "date_only": false, "value": "2022-10-17T19:00:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M7F3-552R-PF23", "record": "GHSA-M7F3-552R-PF23", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-19T19:00:21Z", "date_only": false, "value": "2022-10-19T19:00:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M7F3-552R-PF23", "record": "GHSA-M7F3-552R-PF23", "field": "modified", "linked_record": true}, {"timestamp": "2022-10-22T06:36:59Z", "date_only": false, "value": "2022-10-22T06:36:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/h2-8cMxm2rjhROEHHz1DsUtKgyqNrT29ZVXlVrWu3InrfQk", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "525195d7-7fb9-4e9f-8579-0664e331a9e3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-13T03:15:00Z", "date_only": false, "value": "2022-11-13T03:15:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/svK4kHNDHZ_Def8Oth7PJq9-9JuxBN1fVJ912OIPd5FK-fA", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "e01f109a-1603-445c-8335-706d03431667", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-02T12:53:10Z", "date_only": false, "value": "2023-01-02T12:53:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Qahgv_yYIyA3kzVr1z_AWBylMiyjPwrWyfefrMSht9YAvmg", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "085fe031-1cf9-477a-97f6-466e3442f934", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-14T22:23:51Z", "date_only": false, "value": "2023-02-14T22:23:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_github_import_rce_cve_2022_2992.rb", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "88d661db-1785-4fa4-9a86-6d82b927a345", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlab_github_import_rce_cve_2022_2992.rb"}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2022-2992", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-15T20:15:00Z", "date_only": false, "value": "2023-02-15T20:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-2992", "record": "GSD-2022-2992", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-12-13T01:19:19.905Z", "date_only": false, "value": "2023-12-13T01:19:19.905008Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-2992", "record": "GSD-2022-2992", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-03-06T11:14:42.307Z", "date_only": false, "value": "2024-03-06T11:14:42.307Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2022-2992", "record": "BIT-GITLAB-2022-2992", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-08-03T00:53:00.661Z", "date_only": false, "value": "2024-08-03T00:53:00.661Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-2992", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "9fb0246d-5f61-4d29-9932-0b2aee4258f7"}, {"timestamp": "2025-02-23T04:10:45Z", "date_only": false, "value": "2025-02-23T04:10:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "7832d58b-c7bf-44da-a90b-92b92ded59d0"}, {"timestamp": "2025-05-14T14:27:07.346Z", "date_only": false, "value": "2025-05-14T14:27:07.346076Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2992", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-14T14:27:07.346Z", "date_only": false, "value": "2025-05-14T14:27:07.346076Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2992", "record": "FKIE_CVE-2022-2992", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-14T14:27:30.020Z", "date_only": false, "value": "2025-05-14T14:27:30.020Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-14T14:27:30.020Z", "date_only": false, "value": "2025-05-14T14:27:30.020Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2992", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-14T14:31:55Z", "date_only": false, "value": "2025-05-14T14:31:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16310", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "7ad6f9f5-7c3d-469c-8ccb-91d0f9b0821f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-2992\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in GitLab CE/EE affecting all versions from 11.10 prior to 15.1.6, 15.2 to 15.2.4, 15.3 to 15.3.2 allows an authenticated user to achieve remote code execution via the Import from GitHub API endpoint.\n\ud83d\udccf Published: 2022-10-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T14:27:30.020Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/371884\n2. https://hackerone.com/reports/1679624\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-2992.json\n4. http://packetstormsecurity.com/files/171008/GitLab-GitHub-Repo-Import-Deserialization-Remote-Code-Execution.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/16310", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "fcd5c538-4b7b-4118-b05e-f7a4bdc76dc8"}, {"timestamp": "2025-10-24T04:53:05Z", "date_only": false, "value": "2025-10-24T04:53:05Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-2992", "record": "UBUNTU-CVE-2022-2992", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T04:42:56.830Z", "date_only": false, "value": "2026-06-17T04:42:56.830", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2992", "record": "FKIE_CVE-2022-2992", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:00:58.814Z", "date_only": false, "value": "2026-07-29T12:00:58.814024Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/3263", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "fde580b4-4c6a-4551-9892-52cdae10a955", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-2992\nGithub: https://github.com/CsEnox/CVE-2022-2992\nDescribe: \n**", "url": "https://t.me/CVEhub/3263"}, {"timestamp": "2026-08-01T02:00:04.693Z", "date_only": false, "value": "2026-08-01T02:00:04.693515Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/3263", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "3e4e6538-ef10-4981-9193-1e2e28a73320", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-2992\nGithub: https://github.com/CsEnox/CVE-2022-2992\nDescribe: \n**", "url": "https://t.me/CVEhub/3263", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-09T04:23:36.657Z", "date_only": false, "value": "2026-08-09T04:23:36.657396Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/2381", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "1628b11b-7c5e-400d-9898-cf129246084c", "content": "#Threat_Research\n1. Using Threat Emulation for Threat Hunting\n\ud83d\udd17 See on Medium\n\n2. Persistent PHP payloads in PNGs: How to Inject PHP code in an image - and keep it there\n\ud83d\udd17 See on Synacktiv\n\n#tools\n#Red_Team_Tactics\nShadowSpray - tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects\n\ud83d\udd17 See on Github\n\n#tools\n#Blue_Team_Techniques\n1. LMD - Linux Malware Detection\n\ud83d\udd17 See on Github\n\n2. Aftermath - free macOS IR framework\n\ud83d\udd17 See on Github\n\n#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\n\ud83d\udd17 See on Github\n\n\u2764\ufe0f| Gostou do conte\u00fado? Nos fa\u00e7a uma doa\u00e7\u00e3o!\n\nShare and Supporte us ~ @zero0lab \u2764\ufe0f", "url": "https://t.me/onelab1337/2381"}, {"timestamp": "2026-08-10T00:00:29.467Z", "date_only": false, "value": "2026-08-10T00:00:29.467130Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/2381", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "9d21f872-b012-46c7-95fc-5dd92c89b0a8", "content": "#Threat_Research\n1. Using Threat Emulation for Threat Hunting\n\ud83d\udd17 See on Medium\n\n2. Persistent PHP payloads in PNGs: How to Inject PHP code in an image - and keep it there\n\ud83d\udd17 See on Synacktiv\n\n#tools\n#Red_Team_Tactics\nShadowSpray - tool to spray Shadow Credentials across an entire domain in hopes of abusing long forgotten GenericWrite/GenericAll DACLs over other objects\n\ud83d\udd17 See on Github\n\n#tools\n#Blue_Team_Techniques\n1. LMD - Linux Malware Detection\n\ud83d\udd17 See on Github\n\n2. Aftermath - free macOS IR framework\n\ud83d\udd17 See on Github\n\n#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\n\ud83d\udd17 See on Github\n\n\u2764\ufe0f| Gostou do conte\u00fado? Nos fa\u00e7a uma doa\u00e7\u00e3o!\n\nShare and Supporte us ~ @zero0lab \u2764\ufe0f", "url": "https://t.me/onelab1337/2381", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:25.803Z", "date_only": false, "value": "2026-09-01T17:00:25.803780Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6215", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "617fb41d-8375-4870-934d-274f7772d29e", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "url": "https://t.me/cissp/6215"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2022-2992", "record": "BIT-GITLAB-2022-2992", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-10T06:00:05.472Z", "date_only": false, "value": "2026-09-10T06:00:05.472388Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6215", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "19a494a6-76d5-4dc9-b1c6-2c21bc7459f9", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "url": "https://t.me/cissp/6215", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-03T08:15:00.038Z", "anchors": {"origin": {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-10-09T14:07:43Z", "date_only": false, "value": "2022-10-09T14:07:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/25958", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "03e688ef-7759-4918-aa57-dc9a204d77c4", "content": "https://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/intelexch/25958", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2022-10-11T02:32:29Z", "date_only": false, "value": "2022-10-11T02:32:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/6946", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "6268bb61-9610-4e11-a865-8313c1964f90", "content": "#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/CyberSecurityTechnologies/6946", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -509251.0, "hours": -141.4586111111111, "days": -5.894108796296297, "min_seconds": -595651.0, "max_seconds": -509251.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-10-11T02:32:29Z", "date_only": false, "value": "2022-10-11T02:32:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/6946", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "6268bb61-9610-4e11-a865-8313c1964f90", "content": "#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/CyberSecurityTechnologies/6946", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": -509251.0, "hours": -141.4586111111111, "days": -5.894108796296297, "min_seconds": -595651.0, "max_seconds": -509251.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-10-11T02:32:29Z", "date_only": false, "value": "2022-10-11T02:32:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/6946", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "6268bb61-9610-4e11-a865-8313c1964f90", "content": "#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/CyberSecurityTechnologies/6946", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": -640337.0, "hours": -177.8713888888889, "days": -7.41130787037037, "min_seconds": -726737.0, "max_seconds": -640337.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-10-09T14:07:43Z", "date_only": false, "value": "2022-10-09T14:07:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/25958", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "03e688ef-7759-4918-aa57-dc9a204d77c4", "content": "https://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/intelexch/25958", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 127728900.038257, "hours": 35480.25001062694, "days": 1478.3437504427893, "min_seconds": 127642500.038257, "max_seconds": 127728900.038257, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2992", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-03T08:15:00.038Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 128238151.038257, "hours": 35621.70862173806, "days": 1484.2378592390858, "min_seconds": 128238151.038257, "max_seconds": 128238151.038257, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-11T02:32:29Z", "date_only": false, "value": "2022-10-11T02:32:29.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/6946", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "6268bb61-9610-4e11-a865-8313c1964f90", "content": "#exploit\nCVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/CyberSecurityTechnologies/6946", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-03T08:15:00.038Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 128369237.038257, "hours": 35658.12139951583, "days": 1485.7550583131597, "min_seconds": 128369237.038257, "max_seconds": 128369237.038257, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-09T14:07:43Z", "date_only": false, "value": "2022-10-09T14:07:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/25958", "record": "CVE-2022-2992", "field": "creation_timestamp", "uuid": "03e688ef-7759-4918-aa57-dc9a204d77c4", "content": "https://github.com/CsEnox/CVE-2022-2992", "url": "https://t.me/intelexch/25958", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-03T08:15:00.038Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}