{"metadata": {"vulnerability": "CVE-2023-47635", "count": 20, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2023-11-07T16:57:49.245Z", "date_only": false, "value": "2023-11-07T16:57:49.245Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-47635", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:51.284Z", "date_only": false, "value": "2023-12-13T01:20:51.284699Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-47635", "record": "GSD-2023-47635", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-02-20T16:45:39.305Z", "date_only": false, "value": "2024-02-20T16:45:39.305Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-47635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-02-20T17:26:38.896Z", "date_only": false, "value": "2024-02-20T17:26:38.896Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-47635", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-02-20T18:03:12Z", "date_only": false, "value": "2024-02-20T18:03:12Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F3QM-VFC3-JG6V", "record": "GHSA-F3QM-VFC3-JG6V", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-02-20T18:15:50Z", "date_only": false, "value": "2024-02-20T18:15:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F3QM-VFC3-JG6V", "record": "GHSA-F3QM-VFC3-JG6V", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-02-20T18:15:50.147Z", "date_only": false, "value": "2024-02-20T18:15:50.147", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-47635", "record": "FKIE_CVE-2023-47635", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-02-20T18:15:50.147Z", "date_only": false, "value": "2024-02-20T18:15:50.147", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-47635", "record": "GSD-2023-47635", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2024-02-20T19:27:09Z", "date_only": false, "value": "2024-02-20T19:27:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/188839", "record": "CVE-2023-47635", "field": "creation_timestamp", "uuid": "fdedcca4-405a-4a6f-afb2-ff1592fdf0c6", "content": "https://ift.tt/IwQ7AhN\nCVE-2023-47635", "url": "https://t.me/ctinow/188839"}, {"timestamp": "2024-02-20T19:31:50Z", "date_only": false, "value": "2024-02-20T19:31:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/188855", "record": "CVE-2023-47635", "field": "creation_timestamp", "uuid": "b906080b-2128-4d6f-8c10-6f08d3b3d5bd", "content": "https://ift.tt/IwQ7AhN\nCVE-2023-47635", "url": "https://t.me/ctinow/188855"}, {"timestamp": "2024-02-20T19:50:53.960Z", "date_only": false, "value": "2024-02-20T19:50:53.960", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-47635", "record": "GSD-2023-47635", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-02-20T22:34:19Z", "date_only": false, "value": "2024-02-20T22:34:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F3QM-VFC3-JG6V", "record": "GHSA-F3QM-VFC3-JG6V", "field": "modified", "linked_record": true}, {"timestamp": "2024-02-21T15:34:16Z", "date_only": false, "value": "2024-02-21T15:34:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3849", "record": "CVE-2023-47635", "field": "creation_timestamp", "uuid": "39bb9ccd-2192-400f-a443-79a4febf3424", "content": "#ExploitObserverAlert\n\nCVE-2023-47635\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-47635. Decidim is a participatory democracy framework. Starting in version 0.23.0 and prior to versions 0.27.5 and 0.28.0, the CSRF authenticity token check is disabled for the questionnaire templates preview. The issue does not imply a serious security thread as you need to have access also to the session cookie in order to see this resource. This URL does not allow modifying the resource but it may allow attackers to gain access to information which was not meant to be public. The issue is fixed in version 0.27.5 and 0.28.0. As a workaround, disable the templates functionality or remove all available templates.", "url": "https://t.me/arpsyndicate/3849"}, {"timestamp": "2024-03-08T16:21:38Z", "date_only": false, "value": "2024-03-08T16:21:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/203418", "record": "CVE-2023-47635", "field": "creation_timestamp", "uuid": "62681320-90d4-4f93-b689-ede53813b26e", "content": "https://ift.tt/K2nQ1fx\nCVE-2023-47635 | Decidim up to 0.27.4 server-side request forgery", "url": "https://t.me/ctinow/203418"}, {"timestamp": "2024-08-02T21:16:42.655Z", "date_only": false, "value": "2024-08-02T21:16:42.655Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-47635", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-22T13:23:33.057Z", "date_only": false, "value": "2024-08-22T13:23:33.057811Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-47635", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-08-22T13:23:33.057Z", "date_only": false, "value": "2024-08-22T13:23:33.057811Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-47635", "record": "FKIE_CVE-2023-47635", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-08-22T13:25:39.658Z", "date_only": false, "value": "2024-08-22T13:25:39.658Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-47635", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-22T13:25:39.658Z", "date_only": false, "value": "2024-08-22T13:25:39.658Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-47635", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:33:01.337Z", "date_only": false, "value": "2026-06-17T06:33:01.337", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-47635", "record": "FKIE_CVE-2023-47635", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-04T17:05:46.526Z", "anchors": {"origin": {"timestamp": "2024-02-20T16:45:39.305Z", "date_only": false, "value": "2024-02-20T16:45:39.305Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-47635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-02-20T16:45:39.305Z", "date_only": false, "value": "2024-02-20T16:45:39.305Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-47635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 85364407.221333, "hours": 23712.335339259167, "days": 988.0139724691319, "min_seconds": 85364407.221333, "max_seconds": 85364407.221333, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-02-20T16:45:39.305Z", "date_only": false, "value": "2024-02-20T16:45:39.305Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-47635", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-04T17:05:46.526Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}