{"metadata": {"vulnerability": "CVE-2022-41852", "count": 150, "kinds": {"milestone": 8, "sighting": 12, "kev": 0, "other": 130}, "linked_omitted": 0}, "data": [{"timestamp": "2022-08-30T00:00:00Z", "date_only": false, "value": "2022-08-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2022-08-30T00:00:00Z", "date_only": false, "value": "2022-08-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.2.release_date", "linked_record": true}, {"timestamp": "2022-09-05T00:00:00Z", "date_only": false, "value": "2022-09-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2022-09-05T00:00:00Z", "date_only": false, "value": "2022-09-05T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.9.release_date", "linked_record": true}, {"timestamp": "2022-09-14T00:00:00Z", "date_only": false, "value": "2022-09-14T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2022-09-14T00:00:00Z", "date_only": false, "value": "2022-09-14T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.2.discovery_date", "linked_record": true}, {"timestamp": "2022-09-16T00:00:00Z", "date_only": false, "value": "2022-09-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2022-09-16T00:00:00Z", "date_only": false, "value": "2022-09-16T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.16.release_date", "linked_record": true}, {"timestamp": "2022-09-20T00:00:00Z", "date_only": false, "value": "2022-09-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2022-09-20T00:00:00Z", "date_only": false, "value": "2022-09-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.15.release_date", "linked_record": true}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2022-09-22T00:00:00Z", "date_only": false, "value": "2022-09-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.4.release_date", "linked_record": true}, {"timestamp": "2022-09-26T00:00:00Z", "date_only": false, "value": "2022-09-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2022-09-26T00:00:00Z", "date_only": false, "value": "2022-09-26T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.9.discovery_date", "linked_record": true}, {"timestamp": "2022-09-30T00:00:00Z", "date_only": false, "value": "2022-09-30T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-41852", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-10-02T00:00:00Z", "date_only": false, "value": "2022-10-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.25.release_date", "linked_record": true}, {"timestamp": "2022-10-02T00:00:00Z", "date_only": false, "value": "2022-10-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.25.release_date", "linked_record": true}, {"timestamp": "2022-10-06T00:00:00Z", "date_only": true, "value": "2022-10-06", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-41852", "record": "GSD-2022-41852", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2022-10-06T00:00:00Z", "date_only": true, "value": "2022-10-06", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-41852", "record": "GSD-2022-41852", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2022-10-06T00:00:00Z", "date_only": false, "value": "2022-10-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-06T00:00:00Z", "date_only": false, "value": "2022-10-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.20.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-06T17:14:59.886Z", "date_only": false, "value": "2022-10-06T17:14:59.886Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-41852", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-10-06T18:17:00Z", "date_only": false, "value": "2022-10-06T18:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WRX5-RP7M-MM49", "record": "GHSA-WRX5-RP7M-MM49", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-10-06T18:17:00Z", "date_only": false, "value": "2022-10-06T18:17:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-41852", "record": "UBUNTU-CVE-2022-41852", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-06T18:17:00Z", "date_only": false, "value": "2022-10-06T18:17Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-41852", "record": "GSD-2022-41852", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-10-06T18:17:05.487Z", "date_only": false, "value": "2022-10-06T18:17:05.487", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41852", "record": "FKIE_CVE-2022-41852", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-06T18:52:05Z", "date_only": false, "value": "2022-10-06T18:52:05Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WRX5-RP7M-MM49", "record": "GHSA-WRX5-RP7M-MM49", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": false, "value": "2022-10-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": false, "value": "2022-10-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.16.discovery_date", "linked_record": true}, {"timestamp": "2022-10-15T10:59:08Z", "date_only": false, "value": "2022-10-15T10:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/wireshark_hacking/769", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "d2afc425-fd26-43e0-acc5-e8ebd64823fc", "content": "CVE-2022-41852\nRCE in JXPath Library \n\u0412\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u0435\u043c About", "url": "https://t.me/wireshark_hacking/769", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.25.discovery_date", "linked_record": true}, {"timestamp": "2022-10-17T00:00:00Z", "date_only": false, "value": "2022-10-17T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.25.discovery_date", "linked_record": true}, {"timestamp": "2022-10-18T00:00:00Z", "date_only": false, "value": "2022-10-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2022-10-18T00:00:00Z", "date_only": false, "value": "2022-10-18T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.15.discovery_date", "linked_record": true}, {"timestamp": "2022-10-18T17:10:24Z", "date_only": false, "value": "2022-10-18T17:10:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/1251", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "9bdc8762-6f3c-472d-afb7-f738cf5588a7", "url": "https://t.me/crackcodes/1251", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-10-19T00:00:00Z", "date_only": false, "value": "2022-10-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.discovery_date", "linked_record": true, "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2022-10-19T00:00:00Z", "date_only": false, "value": "2022-10-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.20.discovery_date", "linked_record": true, "metric_role": "discovery", "metric_basis": "recorded_event"}, {"timestamp": "2022-10-21T20:22:06Z", "date_only": false, "value": "2022-10-21T20:22:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1053", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "f7e1084c-faec-476c-8f08-8d1f236d5930", "content": "CVE-2022-41852\nRCE in JXPath Library \n\u0412\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u0435\u043c About", "url": "https://t.me/proxy_bar/1053", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-10-24T07:54:04Z", "date_only": false, "value": "2022-10-24T07:54:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Q5Fejp7LhFOfhKinSoZ9Tvvv4SxjT_mKy-yfk9_dFJv6020", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "2a976305-f4c9-4113-b941-e736a59c6005", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-10-25T00:00:00Z", "date_only": false, "value": "2022-10-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.19.release_date", "linked_record": true}, {"timestamp": "2022-10-25T00:00:00Z", "date_only": false, "value": "2022-10-25T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.19.release_date", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2022-11-01T00:00:00Z", "date_only": false, "value": "2022-11-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.3.release_date", "linked_record": true}, {"timestamp": "2022-11-04T00:00:00Z", "date_only": false, "value": "2022-11-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2022-11-04T00:00:00Z", "date_only": false, "value": "2022-11-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.6.release_date", "linked_record": true}, {"timestamp": "2022-11-07T00:00:00Z", "date_only": false, "value": "2022-11-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2022-11-07T00:00:00Z", "date_only": false, "value": "2022-11-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.5.release_date", "linked_record": true}, {"timestamp": "2022-11-07T17:22:16Z", "date_only": false, "value": "2022-11-07T17:22:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/137803", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "f5d69e0f-7321-4017-a3b2-bf5281d1b81b", "content": "{\n  \"Source\": \"https://t.me/documentors\",\n  \"Content\": \"CVE-2022-4185.zip 6.1 kB \ud83d\udca5Apache Commons JXPath RCE (CVE-2022-41852) People who use JXPath to interpret untrusted XPath expressions may be vulnerable to RCE attacks. All JXPathContext class functions that deal with XPath strings are vulnerable, except the compile() and compilePath() functions. An attacker can use an XPath expression to load any Java class from the classpath, resulting in code execution. To load remote configuration to achieve RCE we can use two class constructors in spring: org.springframework.context.support.ClassPathXmlApplicationContext org.springframework.context.support.FileSystemXmlApplicationContext \ud83d\udcbeAnother analysis + PoC\", \n  \"author\": \"\u2693\ufe0f\ud835\udd07\ud835\udd2c\ud835\udd20\ud835\udd32\ud835\udd2a\ud835\udd22\ud835\udd2b\ud835\udd31\ud835\udd2c\ud835\udd2f\",\n  \"Detection Date\": \"07 Nov 2022\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/137803", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-09T11:03:03Z", "date_only": false, "value": "2022-11-09T11:03:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7133", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "e3af9c6f-0765-4bb1-9e23-f5eb2e1bc8b1", "content": "#Threat_Research\n1. Apache Commons JXPath RCE (CVE-2022-41852)\nhttps://xz.aliyun.com/t/11813\n2. Vulnerability package analysis in InfraSuite Device Master\nhttps://tttang.com/archive/1806/#toc_cve-2022-41778\n3. Malicious Python Packages Replace Crypto Addresses in Developer Clipboards\nhttps://blog.phylum.io/pypi-malware-replaces-crypto-addresses-in-developers-clipboard", "url": "https://t.me/CyberSecurityTechnologies/7133", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-10T00:00:00Z", "date_only": false, "value": "2022-11-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.13.release_date", "linked_record": true}, {"timestamp": "2022-11-10T00:00:00Z", "date_only": false, "value": "2022-11-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.13.release_date", "linked_record": true}, {"timestamp": "2022-11-10T15:15:00Z", "date_only": false, "value": "2022-11-10T15:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-41852", "record": "GSD-2022-41852", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-11-13T00:00:00Z", "date_only": false, "value": "2022-11-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.22.release_date", "linked_record": true}, {"timestamp": "2022-11-13T00:00:00Z", "date_only": false, "value": "2022-11-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.22.release_date", "linked_record": true}, {"timestamp": "2022-11-17T11:10:13Z", "date_only": false, "value": "2022-11-17T11:10:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QOyLEkw0yy9hNU3pXPWg3dYPxEeEfJeRh-j1_1pPhTaDgUE", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "b0aa039f-36c0-48aa-95bf-743f64386ef7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": false, "value": "2022-11-21T00:00:00.000Z", "kind": "other", "label": "Rejected", "source": "cvelistv5", "record": "CVE-2022-41852", "field": "cveMetadata.dateRejected"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": false, "value": "2022-11-21T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2022-41852", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-23T00:00:00Z", "date_only": false, "value": "2022-11-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2022-11-23T00:00:00Z", "date_only": false, "value": "2022-11-23T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.3.discovery_date", "linked_record": true}, {"timestamp": "2022-12-01T00:00:00Z", "date_only": false, "value": "2022-12-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2022-12-01T00:00:00Z", "date_only": false, "value": "2022-12-01T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.6.discovery_date", "linked_record": true}, {"timestamp": "2022-12-08T00:00:00Z", "date_only": false, "value": "2022-12-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.22.discovery_date", "linked_record": true}, {"timestamp": "2022-12-08T00:00:00Z", "date_only": false, "value": "2022-12-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.22.discovery_date", "linked_record": true}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.23.release_date", "linked_record": true}, {"timestamp": "2022-12-12T00:00:00Z", "date_only": false, "value": "2022-12-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.23.release_date", "linked_record": true}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.1.discovery_date", "linked_record": true}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.1.release_date", "linked_record": true}, {"timestamp": "2022-12-20T00:00:00Z", "date_only": false, "value": "2022-12-20T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2022-12-20T00:00:00Z", "date_only": false, "value": "2022-12-20T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.7.discovery_date", "linked_record": true}, {"timestamp": "2022-12-28T00:00:00Z", "date_only": false, "value": "2022-12-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.24.release_date", "linked_record": true}, {"timestamp": "2022-12-28T00:00:00Z", "date_only": false, "value": "2022-12-28T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.24.release_date", "linked_record": true}, {"timestamp": "2023-01-13T00:00:00Z", "date_only": false, "value": "2023-01-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.33.release_date", "linked_record": true}, {"timestamp": "2023-01-13T00:00:00Z", "date_only": false, "value": "2023-01-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.33.release_date", "linked_record": true}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.0.discovery_date", "linked_record": true}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2023-02-15T00:00:00Z", "date_only": false, "value": "2023-02-15T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.0.release_date", "linked_record": true}, {"timestamp": "2023-02-16T00:00:00Z", "date_only": false, "value": "2023-02-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.24.discovery_date", "linked_record": true}, {"timestamp": "2023-02-16T00:00:00Z", "date_only": false, "value": "2023-02-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.24.discovery_date", "linked_record": true}, {"timestamp": "2023-02-20T00:00:00Z", "date_only": false, "value": "2023-02-20T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.34.discovery_date", "linked_record": true}, {"timestamp": "2023-02-20T00:00:00Z", "date_only": false, "value": "2023-02-20T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.34.discovery_date", "linked_record": true}, {"timestamp": "2023-02-20T00:00:00Z", "date_only": false, "value": "2023-02-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.34.release_date", "linked_record": true}, {"timestamp": "2023-02-20T00:00:00Z", "date_only": false, "value": "2023-02-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.34.release_date", "linked_record": true}, {"timestamp": "2023-03-06T22:41:22Z", "date_only": false, "value": "2023-03-06T22:41:22Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WRX5-RP7M-MM49", "record": "GHSA-WRX5-RP7M-MM49", "field": "modified", "linked_record": true}, {"timestamp": "2023-03-06T22:41:22Z", "date_only": false, "value": "2023-03-06T22:41:22Z", "kind": "other", "label": "Withdrawn", "source": "github \u00b7 GHSA-WRX5-RP7M-MM49", "record": "GHSA-WRX5-RP7M-MM49", "field": "withdrawn", "linked_record": true}, {"timestamp": "2023-03-20T00:00:00Z", "date_only": false, "value": "2023-03-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.30.release_date", "linked_record": true}, {"timestamp": "2023-03-20T00:00:00Z", "date_only": false, "value": "2023-03-20T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.30.release_date", "linked_record": true}, {"timestamp": "2023-03-21T00:00:00Z", "date_only": false, "value": "2023-03-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.30.discovery_date", "linked_record": true}, {"timestamp": "2023-03-21T00:00:00Z", "date_only": false, "value": "2023-03-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.30.discovery_date", "linked_record": true}, {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.28.release_date", "linked_record": true}, {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.28.release_date", "linked_record": true}, {"timestamp": "2023-03-27T00:00:00Z", "date_only": false, "value": "2023-03-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2023-03-27T00:00:00Z", "date_only": false, "value": "2023-03-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.5.discovery_date", "linked_record": true}, {"timestamp": "2023-03-29T00:00:00Z", "date_only": false, "value": "2023-03-29T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.29.discovery_date", "linked_record": true}, {"timestamp": "2023-03-29T00:00:00Z", "date_only": false, "value": "2023-03-29T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.29.discovery_date", "linked_record": true}, {"timestamp": "2023-04-13T00:00:00Z", "date_only": false, "value": "2023-04-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.32.discovery_date", "linked_record": true}, {"timestamp": "2023-04-13T00:00:00Z", "date_only": false, "value": "2023-04-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.32.discovery_date", "linked_record": true}, {"timestamp": "2023-04-13T00:00:00Z", "date_only": false, "value": "2023-04-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.32.release_date", "linked_record": true}, {"timestamp": "2023-04-13T00:00:00Z", "date_only": false, "value": "2023-04-13T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.32.release_date", "linked_record": true}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.28.discovery_date", "linked_record": true}, {"timestamp": "2023-04-21T00:00:00Z", "date_only": false, "value": "2023-04-21T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.28.discovery_date", "linked_record": true}, {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "vulnerabilities.20.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-03T22:00:00Z", "date_only": false, "value": "2023-05-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-03T22:00:00Z", "date_only": false, "value": "2023-05-03T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-03T22:00:00Z", "date_only": false, "value": "2023-05-03T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "vulnerabilities.19.release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-18T22:00:00Z", "date_only": false, "value": "2023-05-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2023-06-15T22:00:00Z", "date_only": false, "value": "2023-06-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2023-06-19T22:00:00Z", "date_only": false, "value": "2023-06-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2023-06-25T22:00:00Z", "date_only": false, "value": "2023-06-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.4.date", "linked_record": true}, {"timestamp": "2023-06-28T22:00:00Z", "date_only": false, "value": "2023-06-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.5.date", "linked_record": true}, {"timestamp": "2023-06-29T22:00:00Z", "date_only": false, "value": "2023-06-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.6.date", "linked_record": true}, {"timestamp": "2023-07-25T22:00:00Z", "date_only": false, "value": "2023-07-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.7.date", "linked_record": true}, {"timestamp": "2023-08-07T22:00:00Z", "date_only": false, "value": "2023-08-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.8.date", "linked_record": true}, {"timestamp": "2023-08-16T22:00:00Z", "date_only": false, "value": "2023-08-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.9.date", "linked_record": true}, {"timestamp": "2023-08-31T22:00:00Z", "date_only": false, "value": "2023-08-31T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.10.date", "linked_record": true}, {"timestamp": "2023-11-07T03:53:02.600Z", "date_only": false, "value": "2023-11-07T03:53:02.600", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41852", "record": "FKIE_CVE-2022-41852", "field": "lastModified", "linked_record": true}, {"timestamp": "2023-12-06T23:00:00Z", "date_only": false, "value": "2023-12-06T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.11.date", "linked_record": true}, {"timestamp": "2023-12-13T01:19:32.690Z", "date_only": false, "value": "2023-12-13T01:19:32.690841Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-41852", "record": "GSD-2022-41852", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-21T23:00:00Z", "date_only": false, "value": "2023-12-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.12.date", "linked_record": true}, {"timestamp": "2023-12-26T23:00:00Z", "date_only": false, "value": "2023-12-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.13.date", "linked_record": true}, {"timestamp": "2024-01-22T23:00:00Z", "date_only": false, "value": "2024-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.14.date", "linked_record": true}, {"timestamp": "2024-02-28T23:00:00Z", "date_only": false, "value": "2024-02-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.15.date", "linked_record": true}, {"timestamp": "2024-04-02T20:37:29Z", "date_only": false, "value": "2024-04-02T20:37:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BbgDKgrCjAs5CoaxK7bbAqyVWEqK52CK1ocqdsJVUV8JCuI", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "7318b929-6932-4aba-93bd-cb7286894736", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-02T20:37:30Z", "date_only": false, "value": "2024-04-02T20:37:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/14399", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "074dc525-b2c2-4536-bf3e-b561ec651070", "url": "https://t.me/LockBitRaasRansomware/14399", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-17T22:55:43Z", "date_only": false, "value": "2024-12-17T22:55:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2024-12-17T22:55:43Z", "date_only": false, "value": "2024-12-17T22:55:43+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-12-17T22:55:43Z", "date_only": false, "value": "2024-12-17T22:55:43+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023_2100", "record": "RHSA-2023_2100", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2025-02-13T15:46:33.700Z", "date_only": false, "value": "2025-02-13T15:46:33.700Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-41852", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-19T15:17:44Z", "date_only": false, "value": "2025-03-19T15:17:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8062", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "e4c34f98-f616-46ea-92c1-1b1525543654", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-36401\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.22.6, 2.23.6, 2.24.4, and 2.25.2, multiple OGC request parameters allow Remote Code Execution (RCE) by unauthenticated users through specially crafted input against a default GeoServer installation due to unsafely evaluating property names as XPath expressions.\n\nThe GeoTools library API that GeoServer calls evaluates property/attribute names for feature types in a way that unsafely passes them to the commons-jxpath library which can execute arbitrary code when evaluating XPath expressions. This XPath evaluation is intended to be used only by complex feature types (i.e., Application Schema data stores) but is incorrectly being applied to simple feature types as well which makes this vulnerability apply to **ALL** GeoServer instances. No public PoC is provided but this vulnerability has been confirmed to be exploitable through WFS GetFeature, WFS GetPropertyValue, WMS GetMap, WMS GetFeatureInfo, WMS GetLegendGraphic and WPS Execute requests. This vulnerability can lead to executing arbitrary code.\n\nVersions 2.22.6, 2.23.6, 2.24.4, and 2.25.2 contain a patch for the issue. A workaround exists by removing the `gt-complex-x.y.jar` file from the GeoServer where `x.y` is the GeoTools version (e.g., `gt-complex-31.1.jar` if running GeoServer 2.25.1). This will remove the vulnerable code from GeoServer but may break some GeoServer functionality or prevent GeoServer from deploying if the gt-complex module is needed.\n\ud83d\udccf Published: 2024-07-01T15:25:41.873Z\n\ud83d\udccf Modified: 2025-03-19T14:55:46.536Z\n\ud83d\udd17 References:\n1. https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv\n2. https://github.com/geotools/geotools/security/advisories/GHSA-w3pj-wh35-fq8w\n3. https://github.com/geotools/geotools/pull/4797\n4. https://github.com/Warxim/CVE-2022-41852?tab=readme-ov-file#workaround-for-cve-2022-41852\n5. https://osgeo-org.atlassian.net/browse/GEOT-7587", "url": "https://t.me/DarkWebInformer_CVEAlerts/8062"}, {"timestamp": "2025-04-02T22:00:00Z", "date_only": false, "value": "2025-04-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.16.date", "linked_record": true}, {"timestamp": "2025-06-09T22:00:00Z", "date_only": false, "value": "2025-06-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.17.date", "linked_record": true}, {"timestamp": "2025-06-30T22:00:00Z", "date_only": false, "value": "2025-06-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.18.date", "linked_record": true}, {"timestamp": "2025-08-01T04:55:49Z", "date_only": false, "value": "2025-08-01T04:55:49Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-41852", "record": "UBUNTU-CVE-2022-41852", "field": "modified", "linked_record": true}, {"timestamp": "2025-08-01T19:40:31Z", "date_only": false, "value": "2025-08-01T19:40:31Z", "kind": "other", "label": "Withdrawn", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-41852", "record": "UBUNTU-CVE-2022-41852", "field": "withdrawn", "linked_record": true}, {"timestamp": "2026-01-25T23:00:00Z", "date_only": false, "value": "2026-01-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.19.date", "linked_record": true}, {"timestamp": "2026-03-23T23:00:00Z", "date_only": false, "value": "2026-03-23T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.revision_history.20.date", "linked_record": true}, {"timestamp": "2026-03-23T23:00:00Z", "date_only": false, "value": "2026-03-23T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-03-24T10:23:19.288Z", "date_only": false, "value": "2026-03-24T10:23:19.288+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1142", "record": "WID-SEC-W-2023-1142", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-07-29T12:00:58.392Z", "date_only": false, "value": "2026-07-29T12:00:58.392647Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/3508", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "0d8e81ff-c307-4bf4-99e5-b2a147cbd835", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-41852\nGithub: https://github.com/Warxim/CVE-2022-41852\nDescribe: \nThose using JXPath to interpret untrusted XPath expressions may be vulnerable to a remote code execution attack. All JXPathContext class functions processing a XPath string are vulnerable except compile() and compilePath() function. The XPath expression can be used by an attacker to load any Java class from the classpath resulting in code execution.", "url": "https://t.me/CVEhub/3508"}, {"timestamp": "2026-08-01T01:00:05.014Z", "date_only": false, "value": "2026-08-01T01:00:05.014805Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/3508", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "7e2eba80-2c8e-4990-a11d-1668bb030a9a", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-41852\nGithub: https://github.com/Warxim/CVE-2022-41852\nDescribe: \nThose using JXPath to interpret untrusted XPath expressions may be vulnerable to a remote code execution attack. All JXPathContext class functions processing a XPath string are vulnerable except compile() and compilePath() function. The XPath expression can be used by an attacker to load any Java class from the classpath resulting in code execution.", "url": "https://t.me/CVEhub/3508", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-07T05:35:46Z", "date_only": false, "value": "2026-11-07T05:35:46+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "document.tracking.revision_history.2.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:46Z", "date_only": false, "value": "2026-11-07T05:35:46+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-11-07T05:35:46Z", "date_only": false, "value": "2026-11-07T05:35:46+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "document.tracking.current_release_date", "linked_record": true}], "metrics": {"as_of": "2026-11-12T13:32:57.612Z", "anchors": {"origin": {"timestamp": "2022-10-06T00:00:00Z", "date_only": false, "value": "2022-10-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": {"timestamp": "2022-10-19T00:00:00Z", "date_only": false, "value": "2022-10-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.discovery_date", "linked_record": true, "metric_role": "discovery", "metric_basis": "recorded_event"}, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-10-06T00:00:00Z", "date_only": false, "value": "2022-10-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2022-10-15T10:59:08Z", "date_only": false, "value": "2022-10-15T10:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/wireshark_hacking/769", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "d2afc425-fd26-43e0-acc5-e8ebd64823fc", "content": "CVE-2022-41852\nRCE in JXPath Library \n\u0412\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u0435\u043c About", "url": "https://t.me/wireshark_hacking/769", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 817148.0, "hours": 226.98555555555555, "days": 9.457731481481481, "min_seconds": 730748.0, "max_seconds": 817148.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-06T00:00:00Z", "date_only": false, "value": "2022-10-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2022-10-15T10:59:08Z", "date_only": false, "value": "2022-10-15T10:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/wireshark_hacking/769", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "d2afc425-fd26-43e0-acc5-e8ebd64823fc", "content": "CVE-2022-41852\nRCE in JXPath Library \n\u0412\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u0435\u043c About", "url": "https://t.me/wireshark_hacking/769", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start"]}, "total_time_to_patch": {"available": true, "seconds": 16985129.0, "hours": 4718.091388888889, "days": 196.5871412037037, "min_seconds": 16898729.0, "max_seconds": 16985129.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-19T00:00:00Z", "date_only": false, "value": "2022-10-19T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.discovery_date", "linked_record": true, "metric_role": "discovery", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}, "discovery_after_disclosure": true}, "disclosure_to_patch": {"available": true, "seconds": 18108329.0, "hours": 5030.091388888889, "days": 209.5871412037037, "min_seconds": 18021929.0, "max_seconds": 18108329.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-06T00:00:00Z", "date_only": false, "value": "2022-10-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "time_unpatched": {"available": true, "seconds": 18108329.0, "hours": 5030.091388888889, "days": 209.5871412037037, "min_seconds": 18021929.0, "max_seconds": 18108329.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-06T00:00:00Z", "date_only": false, "value": "2022-10-06T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 17291181.0, "hours": 4803.105833333333, "days": 200.12940972222222, "min_seconds": 17291181.0, "max_seconds": 17291181.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-15T10:59:08Z", "date_only": false, "value": "2022-10-15T10:59:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/wireshark_hacking/769", "record": "CVE-2022-41852", "field": "creation_timestamp", "uuid": "d2afc425-fd26-43e0-acc5-e8ebd64823fc", "content": "CVE-2022-41852\nRCE in JXPath Library \n\u0412\u043d\u0438\u043c\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u0435\u043c About", "url": "https://t.me/wireshark_hacking/769", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2023-05-03T14:05:29Z", "date_only": false, "value": "2023-05-03T14:05:29+00:00", "kind": "other", "label": "Vendor fix", "source": "csaf_redhat \u00b7 RHSA-2023:2100", "record": "RHSA-2023:2100", "field": "vulnerabilities.20.remediations.0.date", "linked_record": true, "metric_role": "patch", "metric_basis": "recorded_event"}}}}