{"metadata": {"vulnerability": "CVE-2023-36899", "count": 42, "kinds": {"milestone": 7, "sighting": 10, "kev": 0, "other": 25}}, "data": [{"timestamp": "2023-06-27T20:28:49.988Z", "date_only": false, "value": "2023-06-27T20:28:49.988Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-36899", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-08T07:00:00Z", "date_only": false, "value": "2023-08-08T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36899", "record": "MSRC_CVE-2023-36899", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-08T07:00:00Z", "date_only": false, "value": "2023-08-08T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36899", "record": "MSRC_CVE-2023-36899", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-08-08T07:00:00Z", "date_only": false, "value": "2023-08-08T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2023-36899", "field": "containers.cna.datePublic"}, {"timestamp": "2023-08-08T07:00:00Z", "date_only": false, "value": "2023-08-08T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36899", "record": "MSRC_CVE-2023-36899", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-08T18:34:05.660Z", "date_only": false, "value": "2023-08-08T18:34:05.660Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-36899", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-08-08T19:15:00Z", "date_only": false, "value": "2023-08-08T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-36899", "record": "GSD-2023-36899", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-08-08T19:15:10Z", "date_only": false, "value": "2023-08-08T19:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FVH3-94PW-FVCC", "record": "GHSA-FVH3-94PW-FVCC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-08-08T19:15:10.277Z", "date_only": false, "value": "2023-08-08T19:15:10.277", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36899", "record": "FKIE_CVE-2023-36899", "field": "published"}, {"timestamp": "2023-08-08T21:30:37Z", "date_only": false, "value": "2023-08-08T21:30:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FVH3-94PW-FVCC", "record": "GHSA-FVH3-94PW-FVCC", "field": "published"}, {"timestamp": "2023-08-09T00:00:00Z", "date_only": false, "value": "2023-08-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0643", "record": "CERTFR-2023-AVI-0643", "field": "revisions.0.revision_date"}, {"timestamp": "2023-08-10T16:18:02Z", "date_only": false, "value": "2023-08-10T16:18:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/182", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "0972d4fe-2aed-4880-98f2-6cd575e8b19a", "content": "Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP[.]NET Framework (CVE-2023-36899)\n\n\ud83d\udc64 by Soroush Dalili\n\nIn modern web development, while cookies are the go-to method for transmitting session IDs, the .NET Framework also provides an alternative: encoding the session ID directly in the URL. This method is useful to clients that do not support cookies. \nResearcher identified a strange anomaly when the cookieless pattern was repeated twice. This resulted in two vulnerabilities reported to Microsoft as their impact and the exploitation were different:\n   \u2022 IIS restricted path bypass leading to potential authentication and path-filtration bypass\n   \u2022 Application Pool confusion leading to potential privilege escalations\n\n\ud83d\udcdd Contents:\n\u25cf Introduction\n\u25cf Finding the vulnerability\n\u25cf IIS Restricted Path Bypass\n\u25cf The root cause\n\u25cf Application Pool Confusion\n\nhttps://soroush.me/blog/2023/08/cookieless-duodrop-iis-auth-bypass-app-pool-privesc-in-asp-net-framework-cve-2023-36899/", "url": "https://t.me/ptswarm/182"}, {"timestamp": "2023-08-11T14:40:00Z", "date_only": false, "value": "2023-08-11T14:40:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4901", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "c89f45b5-9b8f-49c4-b1c2-3a10c649c823", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-36899 PoC\nURL\uff1ahttps://github.com/d0rb/CVE-2023-36899\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4901"}, {"timestamp": "2023-08-12T12:43:01Z", "date_only": false, "value": "2023-08-12T12:43:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8832", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "a385b749-58b5-41a7-aa3c-7815410660b2", "content": "#WebApp_Security\n1. Smashing the state machine:\nthe true potential of web race conditions\nhttps://portswigger.net/research/smashing-the-state-machine\n2. Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP-NET Framework (CVE-2023-36899)\nhttps://soroush.me/blog/2023/08/cookieless-duodrop-iis-auth-bypass-app-pool-privesc-in-asp-net-framework-cve-2023-36899", "url": "https://t.me/CyberSecurityTechnologies/8832"}, {"timestamp": "2023-08-15T23:39:54Z", "date_only": false, "value": "2023-08-15T23:39:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4929", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "7c402c07-5675-41f9-a473-9b9710d74ef1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-36899\u6f0f\u6d1e\u7684\u590d\u73b0\u73af\u5883\u548c\u5de5\u5177\uff0c\u9488\u5bf9ASP.NET\u6846\u67b6\u4e2d\u7684\u65e0cookie\u4f1a\u8bdd\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u3002\nURL\uff1ahttps://github.com/midisec/CVE-2023-36899\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4929"}, {"timestamp": "2023-08-21T12:27:19Z", "date_only": false, "value": "2023-08-21T12:27:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/7686", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "475e4146-7a7d-4005-baa4-8202a6d6391b", "content": "Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework (CVE-2023-36899) | Soroush Dalili (@irsdl) Blog\n\nhttps://soroush.me/blog/2023/08/cookieless-duodrop-iis-auth-bypass-app-pool-privesc-in-asp-net-framework-cve-2023-36899/", "url": "https://t.me/thebugbountyhunter/7686"}, {"timestamp": "2023-10-17T07:00:00Z", "date_only": false, "value": "2023-10-17T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36899", "record": "MSRC_CVE-2023-36899", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-24T07:00:00Z", "date_only": false, "value": "2023-10-24T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36899", "record": "MSRC_CVE-2023-36899", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-10-26T07:00:00Z", "date_only": false, "value": "2023-10-26T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36899", "record": "MSRC_CVE-2023-36899", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-10-26T07:00:00Z", "date_only": false, "value": "2023-10-26T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36899", "record": "MSRC_CVE-2023-36899", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-06T23:15:00Z", "date_only": false, "value": "2023-11-06T23:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-36899", "record": "GSD-2023-36899", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-07T00:30:31Z", "date_only": false, "value": "2023-11-07T00:30:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FVH3-94PW-FVCC", "record": "GHSA-FVH3-94PW-FVCC", "field": "modified"}, {"timestamp": "2023-12-13T01:20:34.713Z", "date_only": false, "value": "2023-12-13T01:20:34.713054Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-36899", "record": "GSD-2023-36899", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-10T14:19:07Z", "date_only": false, "value": "2024-02-10T14:19:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/1015", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "f7b7c17a-b9a7-4601-ad8b-27fbfbd941b1", "content": "CVE-2023-36899 : Cookieless DuoDrop: IIS Auth Bypass & App Pool Privesc in ASP.NET Framework\nPOC : https://github.com/midisec/CVE-2023-36899\nBlog : https://soroush.me/blog/2023/08/cookieless-duodrop-iis-auth-bypass-app-pool-privesc-in-asp-net-framework-cve-2023-36899/\nBy : Soroush Dalili", "url": "https://t.me/MrVGunz/1015"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-24-102-08", "record": "ICSA-24-102-08", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-556635", "record": "SSA-556635", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-24-102-08", "record": "ICSA-24-102-08", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-556635", "record": "SSA-556635", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-24-102-08", "record": "ICSA-24-102-08", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-04-09T00:00:00Z", "date_only": false, "value": "2024-04-09T00:00:00Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-556635", "record": "SSA-556635", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-04T01:23:36.335Z", "date_only": false, "value": "2024-06-04T01:23:36.335481Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36899", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-06-04T01:23:36.335Z", "date_only": false, "value": "2024-06-04T01:23:36.335481Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36899", "record": "FKIE_CVE-2023-36899", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-04T17:25:48.327Z", "date_only": false, "value": "2024-06-04T17:25:48.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-36899", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T17:01:09.981Z", "date_only": false, "value": "2024-08-02T17:01:09.981Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-36899", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-01T01:58:31.381Z", "date_only": false, "value": "2025-01-01T01:58:31.381Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2023-36899", "record": "MSRC_CVE-2023-36899", "field": "document.tracking.generator.date"}, {"timestamp": "2026-07-29T12:00:07.318Z", "date_only": false, "value": "2026-07-29T12:00:07.318691Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/18882", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "7a847119-2671-4426-a411-a5b6931ca7c6", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-36899*\nGithub: https://github.com/d0rb/CVE-2023-36899", "url": "https://t.me/CVEhub/18882"}, {"timestamp": "2026-07-30T00:00:24.181Z", "date_only": false, "value": "2026-07-30T00:00:24.181010Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/18882", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "468c0315-f9c9-4e0e-8f82-b20d0c0eb5b0", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2023\nName: *CVE-2023-36899*\nGithub: https://github.com/d0rb/CVE-2023-36899", "url": "https://t.me/CVEhub/18882"}, {"timestamp": "2026-08-10T15:11:24.757Z", "date_only": false, "value": "2026-08-10T15:11:24.757Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-36899", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-10T15:11:24.757Z", "date_only": false, "value": "2026-08-10T15:11:24.757Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2023-36899", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-10T16:18:32.117Z", "date_only": false, "value": "2026-08-10T16:18:32.117", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-36899", "record": "FKIE_CVE-2023-36899", "field": "lastModified"}, {"timestamp": "2026-09-05T01:00:05.675Z", "date_only": false, "value": "2026-09-05T01:00:05.675982Z", "kind": "sighting", "label": "Seen", "source": "Telegram/MInuNUaZtHgQIkWaDn-XSBNMalOeSi9Asn4ilk4cWhnEcXw", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "d2af7cbf-0144-4ed5-8ddb-09934ccd02f5"}, {"timestamp": "2026-09-06T00:01:02.843Z", "date_only": false, "value": "2026-09-06T00:01:02.843947Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/MInuNUaZtHgQIkWaDn-XSBNMalOeSi9Asn4ilk4cWhnEcXw", "record": "CVE-2023-36899", "field": "creation_timestamp", "uuid": "091ea02f-18eb-4885-8e85-6a039b6bcf6f"}]}