{"metadata": {"vulnerability": "CVE-2023-2859", "count": 33, "kinds": {"milestone": 5, "sighting": 10, "kev": 0, "other": 18}}, "data": [{"timestamp": "2023-05-24T00:00:00Z", "date_only": true, "value": "2023-05-24", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-2859", "record": "GSD-2023-2859", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2859", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-2859", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntrdev", "record": "CVE-2023-2859", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-24T08:15:00Z", "date_only": false, "value": "2023-05-24T08:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-2859", "record": "GSD-2023-2859", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-05-24T08:15:09Z", "date_only": false, "value": "2023-05-24T08:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-H6JH-CF83-QCQ5", "record": "GHSA-H6JH-CF83-QCQ5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-05-24T08:15:09.713Z", "date_only": false, "value": "2023-05-24T08:15:09.713", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2859", "record": "FKIE_CVE-2023-2859", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-24T09:30:25Z", "date_only": false, "value": "2023-05-24T09:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-H6JH-CF83-QCQ5", "record": "GHSA-H6JH-CF83-QCQ5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-24T11:12:52Z", "date_only": false, "value": "2023-05-24T11:12:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4415", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "9fd92b90-a433-4c51-ade9-f7849646b587", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-2859 Medium Blog\nURL\uff1ahttps://github.com/mnqazi/CVE-2023-2859\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4415", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-24T12:26:46Z", "date_only": false, "value": "2023-05-24T12:26:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/64672", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "f858aed6-5901-4fd0-9d40-edfdfe801968", "content": "\u203c CVE-2023-2859 \u203c\n\nCode Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/64672"}, {"timestamp": "2023-05-25T12:49:50Z", "date_only": false, "value": "2023-05-25T12:49:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8362", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "f77d5e30-a464-483d-802c-d4c35f443a21", "content": "#exploit\n1. CVE-2023-2859:\nStored HTML injection in folderName affecting Admin in TeamPass <3.0.9\nhttps://github.com/mnqazi/CVE-2023-2859\n\n2. CVE-2023-20869/CVE-2023-20870:\nVMWare Stack-based Overflow/Uninitialized Variable Info Leak\nhttps://www.zerodayinitiative.com/blog/2023/5/17/cve-2023-2086920870-exploiting-vmware-workstation-at-pwn2own-vancouver\n\n3. CVE-2023-31070:\nBroadcom BCM47xx SDK EMF slab-out-of-bounds write\nhttps://bugprove.com/knowledge-hub/cve-2023-31070-broadcom-bcm-47xx-sdk-emf-slab-out-of-bounds-write", "url": "https://t.me/CyberSecurityTechnologies/8362", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-25T16:15:06Z", "date_only": false, "value": "2023-05-25T16:15:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3062", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "ba7cae33-4a0c-4f61-9690-843cd23ba4dd", "content": "Tools - Hackers Factory \n\nuserefuzz\n\nUser-Agent, X-Forwarded-For and Referer SQLI Fuzzer made with python. Works on linux and unix based systems.\n\nhttps://github.com/root-tanishq/userefuzz\n\n#infosec #pentesting #bugbounty\n\nChrome Cookie Stealer (and injector)\n\nSteal/Inject Chrome cookies over the DevTools (--remote-debugging-port) protocol.\n\nhttps://github.com/magisterquis/chromecookiestealer\n\n#infosec \n\nCVE-2023-2859\n\nStored HTML injection in folderName affecting Admin in TeamPass <3.0.9\n\nhttps://github.com/mnqazi/CVE-2023-2859\n\n#cve #cybersecurity #infosec\n\nWin32 app isolation repo\n\nWin32 app isolation is a new security feature on Windows that helps contain the damage and safeguard user privacy choices in the event of an application compromise. Win32 app isolation is built on the foundation of AppContainers, which offer a security boundary, and components that virtualize resources and provide brokered access to other resources. This repo contains the documentation and tools to help you isolate your applications.\n\nhttps://github.com/microsoft/win32-app-isolation\n\n#cybersecurity #infosec\n\nHunt3r\n\nHunt3r aims to simplify domain recognition by trying to combine three things:\n\n\u2022 Speed of scans\n\u2022 Accuracy of results\n\u2022 Ease of use of the data\n\nhttps://github.com/EasyRecon/Hunt3r\n\n#bugbounty #infosec #pentesting\n\nmonitor_subdomains\n\nMonitor your target continuously for new subdomains using Discord!\n\nhttps://github.com/faiyazahmad07/monitor_subdomains\n\n#infosec #pentesting #bugbounty\n\nGitFive\n\n#OSINT tool to investigate GitHub profiles.\n\nhttps://github.com/mxrch/GitFive\n\n#cybersecurity #infosec\n\nROPfuscator\n\nROPfuscator is a fine-grained code obfuscation framework for LLVM-supported languages using ROP (return-oriented programming). ROPfuscator obfuscates a program at the assembly code level by transforming regular instructions into ROP chains, thwarting our natural conception of normal control flow.\n\nhttps://github.com/ropfuscator/ropfuscator\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/3062", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-25T17:50:58Z", "date_only": false, "value": "2023-05-25T17:50:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3555", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "a7efa262-8fb9-472a-a504-c069c0837131", "content": "Stored HTML Injection in folderName Affecting Admin in TeamPass <3.0.9 - CVE-2023-2859 (POC)\n\nOne such vulnerability is the Stored HTML Injection in folderName, affecting the administration functionality of TeamPass versions prior to 3.0.9. This vulnerability allows an attacker to inject malicious HTML code into the folderName parameter, leading to potential cross-site scripting (XSS) attacks.\n\nhttps://system32.ink/stored-html-injection-in-foldername-affecting-admin-in-teampass/", "url": "https://t.me/crackcodes/3555", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-25T17:51:32Z", "date_only": false, "value": "2023-05-25T17:51:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/0llaq7_vuPppT7OlMPRHT2kNpkSslsGmp9sH3S4q6-AJhw", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "36b84cb1-081d-4d66-9853-52430a69cd49", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-30T00:00:00Z", "date_only": true, "value": "2023-05-30", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-2859", "record": "GSD-2023-2859", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2023-05-30T12:20:30Z", "date_only": false, "value": "2023-05-30T12:20:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:2320-1", "record": "SUSE-SU-2023:2320-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-05-30T12:20:30Z", "date_only": false, "value": "2023-05-30T12:20:30Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2320-1", "record": "SUSE-SU-2023:2320-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-05-30T12:20:30Z", "date_only": false, "value": "2023-05-30T12:20:30Z", "kind": "other", "label": "Impact", "source": "csaf_suse \u00b7 SUSE-SU-2023:2320-1", "record": "SUSE-SU-2023:2320-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-05-30T12:20:30Z", "date_only": false, "value": "2023-05-30T12:20:30Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:2320-1", "record": "SUSE-SU-2023:2320-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-30T12:20:30Z", "date_only": false, "value": "2023-05-30T12:20:30Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:2320-1", "record": "SUSE-SU-2023:2320-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-05-30T17:11:00Z", "date_only": false, "value": "2023-05-30T17:11Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-2859", "record": "GSD-2023-2859", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-05-31T15:57:56Z", "date_only": false, "value": "2023-05-31T15:57:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-H6JH-CF83-QCQ5", "record": "GHSA-H6JH-CF83-QCQ5", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:20:32.058Z", "date_only": false, "value": "2023-12-13T01:20:32.058717Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-2859", "record": "GSD-2023-2859", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-07-21T20:59:16Z", "date_only": false, "value": "2024-07-21T20:59:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8xo64kZRtnZUysxfz1-RKPttzMMK3cF0g-OlSKNyj5O3", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "a6ea75a1-17eb-4a46-9910-484097482776", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-02T06:33:05.672Z", "date_only": false, "value": "2024-08-02T06:33:05.672Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-2859", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-16T19:03:07.788Z", "date_only": false, "value": "2025-01-16T19:03:07.788605Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-2859", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-16T19:03:07.788Z", "date_only": false, "value": "2025-01-16T19:03:07.788605Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2859", "record": "FKIE_CVE-2023-2859", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-12T17:01:06.883Z", "date_only": false, "value": "2025-02-12T17:01:06.883Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-2859", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T17:01:06.883Z", "date_only": false, "value": "2025-02-12T17:01:06.883Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-2859", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:53:38.637Z", "date_only": false, "value": "2026-06-17T05:53:38.637", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2859", "record": "FKIE_CVE-2023-2859", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:00:30.093Z", "date_only": false, "value": "2026-07-29T12:00:30.093378Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13624", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "2e8a5808-eebf-4716-8c0d-6d5ceccd4fb2", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-2859*\nGithub: https://github.com/mnqazi/CVE-2023-2859", "url": "https://t.me/CVEhub/13624"}, {"timestamp": "2026-07-31T00:00:11.177Z", "date_only": false, "value": "2026-07-31T00:00:11.177602Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13624", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "f81766ee-871e-48e2-9b65-e0b448f9c934", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-2859*\nGithub: https://github.com/mnqazi/CVE-2023-2859", "url": "https://t.me/CVEhub/13624", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T20:00:58.159Z", "date_only": false, "value": "2026-09-01T20:00:58.159793Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/103240", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "cd329fcc-ce64-470f-acbe-f273db644a38", "content": "Hacking on Medium\nCVE-2023-2859: Stored HTML injection in folderName affecting Admin in TeamPass < 3.0.9\n\nhttps://cdn-images-1.medium.com/max/1082/1*QFP10FO635S92Fk6XYmz1Q.png \nHi,\n\nContinue reading on Medium \u00bb", "url": "https://t.me/hacking_Attack/103240"}], "metrics": {"as_of": "2026-11-07T04:22:41.109Z", "anchors": {"origin": {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2859", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2859", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-05-24T11:12:52Z", "date_only": false, "value": "2023-05-24T11:12:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4415", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "9fd92b90-a433-4c51-ade9-f7849646b587", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-2859 Medium Blog\nURL\uff1ahttps://github.com/mnqazi/CVE-2023-2859\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4415", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 40372.0, "hours": 11.214444444444444, "days": 0.4672685185185185, "min_seconds": -46028.0, "max_seconds": 40372.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2859", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-05-24T11:12:52Z", "date_only": false, "value": "2023-05-24T11:12:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4415", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "9fd92b90-a433-4c51-ade9-f7849646b587", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-2859 Medium Blog\nURL\uff1ahttps://github.com/mnqazi/CVE-2023-2859\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4415", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 109138961.109283, "hours": 30316.378085911943, "days": 1263.182420246331, "min_seconds": 109052561.109283, "max_seconds": 109138961.109283, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2859", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T04:22:41.109Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 109098589.109283, "hours": 30305.1636414675, "days": 1262.7151517278126, "min_seconds": 109098589.109283, "max_seconds": 109098589.109283, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-24T11:12:52Z", "date_only": false, "value": "2023-05-24T11:12:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4415", "record": "CVE-2023-2859", "field": "creation_timestamp", "uuid": "9fd92b90-a433-4c51-ade9-f7849646b587", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-2859 Medium Blog\nURL\uff1ahttps://github.com/mnqazi/CVE-2023-2859\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4415", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-07T04:22:41.109Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}