{"metadata": {"vulnerability": "CVE-2023-6548", "count": 62, "kinds": {"milestone": 6, "sighting": 21, "kev": 11, "other": 24}}, "data": [{"timestamp": "2023-12-06T11:01:54.643Z", "date_only": false, "value": "2023-12-06T11:01:54.643Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-6548", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:32.823Z", "date_only": false, "value": "2023-12-13T01:20:32.823328Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-6548", "record": "GSD-2023-6548", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-16T00:00:00Z", "date_only": false, "value": "2024-01-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0039", "record": "CERTFR-2024-AVI-0039", "field": "revisions.0.revision_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0133", "record": "WID-SEC-W-2024-0133", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0133", "record": "WID-SEC-W-2024-0133", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0133", "record": "WID-SEC-W-2024-0133", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0133", "record": "WID-SEC-W-2024-0133", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": false, "value": "2024-01-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-6548", "field": "timestamps.asserted_at", "uuid": "80c176d4-1003-4516-8d2a-a5970fd9136b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": false, "value": "2024-01-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-6548", "field": "timestamps.asserted_at", "uuid": "d27a8ae2-b099-434b-888e-ab8c53525dc3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": true, "value": "2024-01-17", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-6548", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": false, "value": "2024-01-17T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-6548", "field": "evidence.0.details.added_date", "uuid": "d27a8ae2-b099-434b-888e-ab8c53525dc3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": true, "value": "2024-01-17", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-6548", "field": "evidence.0.details.date_added", "uuid": "80c176d4-1003-4516-8d2a-a5970fd9136b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": false, "value": "2024-01-17T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-6548", "field": "timestamps.first_seen_at", "uuid": "80c176d4-1003-4516-8d2a-a5970fd9136b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": false, "value": "2024-01-17T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-6548", "field": "timestamps.first_seen_at", "uuid": "d27a8ae2-b099-434b-888e-ab8c53525dc3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": false, "value": "2024-01-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-6548", "field": "status.status_updated_at", "uuid": "80c176d4-1003-4516-8d2a-a5970fd9136b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": false, "value": "2024-01-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-6548", "field": "status.status_updated_at", "uuid": "d27a8ae2-b099-434b-888e-ab8c53525dc3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-17T00:00:00Z", "date_only": false, "value": "2024-01-17T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-6548", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-01-17T04:00:00Z", "date_only": false, "value": "2024-01-17T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1203", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "a0cb1f6e-5a4c-4de7-9414-03965cd1969e", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1203"}, {"timestamp": "2024-01-17T06:03:43Z", "date_only": false, "value": "2024-01-17T06:03:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/1350", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "7aff413b-5cb2-42d3-920a-0685e47f5070", "content": "Citrix, VMware, and Atlassian Hit with Critical Flaws \u2014 Patch ASAP!\nhttps://thehackernews.com/2024/01/citrix-vmware-and-atlassian-hit-with.html\n\nCitrix is warning of two zero-day security vulnerabilities in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that are being actively exploited in the wild.\nThe flaws are listed below -\n\nCVE-2023-6548 (CVSS score: 5.5) - Authenticated (low privileged) remote code execution on Management Interface (requires access to NSIP, CLIP, or SNIP with management", "url": "https://t.me/KomunitiSiber/1350"}, {"timestamp": "2024-01-17T06:20:00Z", "date_only": false, "value": "2024-01-17T06:20:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/JiTroE_o33lWWkvgdwMzlaTnF4xjfMEwJdtiFfjCCuvaYg", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "13bf7b11-c5c0-4a9d-8c02-a5d954f919ec"}, {"timestamp": "2024-01-17T06:30:38Z", "date_only": false, "value": "2024-01-17T06:30:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/4412", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "89ce9b05-8e7a-4b39-84d6-19a540361106", "content": "More Zero-Days !!!\n\n\u2705 Citrix fixes critical RCE flaws (CVE-2023-6548, CVE-2023-6549) exploited in wild.\n\n\u2705 VMware Aria Automation bug (CVE-2023-34063) allows attacker control.\n\n\u2705 Atlassian issues fixes for 24+ flaws, including RCE.\n\nPatch, Update ASAP: https://thehackernews.com/2024/01/citrix-vmware-and-atlassian-hit-with.html", "url": "https://t.me/thehackernews/4412"}, {"timestamp": "2024-01-17T08:47:54Z", "date_only": false, "value": "2024-01-17T08:47:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityIL/36628", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "26dd95ce-3e7d-408a-901e-266f861aad2c", "content": "\u05d0\u05e8\u05d1\u05e2 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \u05de\u05d4\u05d9\u05de\u05de\u05d4 \u05d4\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05e9\u05db\u05d3\u05d0\u05d9 \u05dc\u05e9\u05d9\u05dd \u05d0\u05dc\u05d9\u05d4\u05df \u05dc\u05d1:\n\n1. \u05d2\u05d9\u05d8\u05d4\u05d0\u05d1 \u05de\u05ea\u05e7\u05e0\u05ea \u05d7\u05d5\u05dc\u05e9\u05d4 \u05d1\u05e2\u05e7\u05d1\u05d5\u05ea\u05d9\u05d4 \u05d4\u05d9\u05d0 \u05d2\u05dd \u05de\u05d1\u05e6\u05e2\u05ea \u05d4\u05d7\u05dc\u05e4\u05d4 \u05dc\u05de\u05e4\u05ea\u05d7\u05d5\u05ea \u05e9\u05dc \u05d7\u05dc\u05e7 \u05de\u05d4\u05e9\u05d9\u05e8\u05d5\u05ea\u05d9\u05dd. (CVE-2024-0200)\n\n2. \u05d7\u05d5\u05dc\u05e9\u05ea Zero-Day \u05d1\u05d3\u05e4\u05d3\u05e4\u05df \u05db\u05e8\u05d5\u05dd \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05f4 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd, \u05d2\u05e8\u05e1\u05d0\u05d5\u05ea \u05de\u05ea\u05d5\u05e7\u05e0\u05d5\u05ea:\n- Windows - 120.0.6099.224/225\n- Mac -120.0.6099.234\n- Linux - 120.0.6099.224\n3. \u05e9\u05ea\u05d9 \u05d7\u05d5\u05dc\u05e9\u05d5\u05ea Zero-Day \u05d1-Citrix Netscaler ADC (\u05e9\u05d5\u05d1...) \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05d5\u05ea \u05e2\u05f4\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05d1\u05e2\u05d5\u05dc\u05dd (CVE-2023-6548, CVE-2023-6549)\n\nhttps://t.me/CyberSecurityIL/4448", "url": "https://t.me/CyberSecurityIL/36628"}, {"timestamp": "2024-01-17T10:06:28Z", "date_only": false, "value": "2024-01-17T10:06:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/287", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "d78369ab-c5b0-49e3-ae75-2747f0d04687", "content": "More Zero-Days !!!\n\n\u2705 Citrix fixes critical RCE flaws (CVE-2023-6548, CVE-2023-6549) exploited in wild.\n\n\u2705 VMware Aria Automation bug (CVE-2023-34063) allows attacker control.\n\n\u2705 Atlassian issues fixes for 24+ flaws, including RCE.\n\nPatch, Update ASAP: https://thehackernews.com/2024/01/citrix-vmware-and-atlassian-hit-with.html", "url": "https://t.me/tengkorakcybercrewz/287"}, {"timestamp": "2024-01-17T10:06:28Z", "date_only": false, "value": "2024-01-17T10:06:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tengkorakcybercrewz/3147", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "5de19b24-86f3-48db-aa76-34d1eab49950", "content": "More Zero-Days !!!\n\n\u2705 Citrix fixes critical RCE flaws (CVE-2023-6548, CVE-2023-6549) exploited in wild.\n\n\u2705 VMware Aria Automation bug (CVE-2023-34063) allows attacker control.\n\n\u2705 Atlassian issues fixes for 24+ flaws, including RCE.\n\nPatch, Update ASAP: https://thehackernews.com/2024/01/citrix-vmware-and-atlassian-hit-with.html", "url": "https://t.me/tengkorakcybercrewz/3147"}, {"timestamp": "2024-01-17T11:16:38Z", "date_only": false, "value": "2024-01-17T11:16:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/169216", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "b7be804a-4d96-42a1-80ea-c8e16deced91", "content": "https://ift.tt/2g4IUCA\nCVE-2023-6548 Exploitation", "url": "https://t.me/ctinow/169216"}, {"timestamp": "2024-01-17T12:48:10Z", "date_only": false, "value": "2024-01-17T12:48:10.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/51342", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "3153923d-71fc-4cdd-a5cf-15b2ff07c426", "content": "Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation\nhttps://www.securityweek.com/citrix-warns-netscaler-adc-customers-of-new-zero-day-exploitation/\n\nCitrix is aware of attacks exploiting two new NetScaler ADC and Gateway zero-day vulnerabilities tracked as CVE-2023-6548 and CVE-2023-6549.\nThe post Citrix Warns NetScaler ADC Customers of New Zero-Day Exploitation (https://www.securityweek.com/citrix-warns-netscaler-adc-customers-of-new-zero-day-exploitation/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/51342"}, {"timestamp": "2024-01-17T15:10:06Z", "date_only": false, "value": "2024-01-17T15:10:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5302", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "0f674b69-5229-49a4-b171-5289bd015546", "content": "\u041d\u043e\u0432\u044b\u0439 \u0433\u043e\u0434 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 Citrix, VMware \u0438 Atlassian \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0441 \u043d\u043e\u0432\u044b\u0445 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\nCitrix \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0434\u0432\u0443\u0445 0-day \u0432 NetScaler ADC (\u0440\u0430\u043d\u0435\u0435 Citrix ADC) \u0438 NetScaler Gateway (\u0440\u0430\u043d\u0435\u0435 Citrix Gateway), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2023-6548\u00a0(CVSS: 5,5) \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 (\u043d\u0438\u0437\u043a\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438) \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a NSIP, CLIP \u0438\u043b\u0438 SNIP \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f).\n\n\u0414\u0440\u0443\u0433\u0430\u044f CVE-2023-6549\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,2) \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u043d\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0431\u044b\u043b\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043e \u043a\u0430\u043a \u0448\u043b\u044e\u0437 \u0438\u043b\u0438 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0443\u0447\u0435\u0442\u0430 \u0438\u043b\u0438 AAA.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 CVE \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u044f \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c NetScaler ADC \u0438 NetScaler Gateway \u0432\u0435\u0440\u0441\u0438\u0438 12.1 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\nVMware \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Aria Automation (\u0440\u0430\u043d\u0435\u0435 vRealize Automation), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f.\n\nCVE-2023-34063\u00a0\u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 9,9, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 CSIRO.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 VMware Aria Automation (8.11.x, 8.12.x, 8.13.x \u0438 8.14.x) \u0438 VMware Cloud Foundation (4.x \u0438 5.x).\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 VMware, \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 - \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e 8.16.\n\nAtlassian \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c\u00a0\u0434\u0432\u0443\u0445 \u0434\u0435\u0441\u044f\u0442\u043a\u043e\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 RCE-\u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0448\u0430\u0431\u043b\u043e\u043d\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Confluence Data Center and Server.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0CVE-2023-22527\u00a0\u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 CVSS 10,0, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u043b\u044f \u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.x, 8.1.x, 8.2.x, 8.3.x, 8.4.x \u0438 8.5.0\u20138.5.3, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u0438 7.19.x LTS.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0440\u0435\u0448\u0435\u043d\u0430\u00a0\u0432\u00a08.5.4, 8.5.5 (Confluence Data Center and Server), 8.6.0, 8.7.1 \u0438 8.7.2 (Confluence Data Center).\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "url": "https://t.me/true_secator/5302"}, {"timestamp": "2024-01-17T18:10:02Z", "date_only": false, "value": "2024-01-17T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "087c3fe6-9da1-42ad-b283-aac21b69cc84"}, {"timestamp": "2024-01-17T20:11:18.462Z", "date_only": false, "value": "2024-01-17T20:11:18.462Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-6548", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-17T20:15:50Z", "date_only": false, "value": "2024-01-17T20:15:50Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W4RW-V3MM-HJ8H", "record": "GHSA-W4RW-V3MM-HJ8H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-17T20:15:50.627Z", "date_only": false, "value": "2024-01-17T20:15:50.627000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202401-2573", "record": "VAR-202401-2573", "field": "sources_release_date.data.1.date"}, {"timestamp": "2024-01-17T20:15:50.627Z", "date_only": false, "value": "2024-01-17T20:15:50.627", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-6548", "record": "FKIE_CVE-2023-6548", "field": "published"}, {"timestamp": "2024-01-17T20:15:50.627Z", "date_only": false, "value": "2024-01-17T20:15:50.627", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-6548", "record": "GSD-2023-6548", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-17T21:30:21Z", "date_only": false, "value": "2024-01-17T21:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W4RW-V3MM-HJ8H", "record": "GHSA-W4RW-V3MM-HJ8H", "field": "published"}, {"timestamp": "2024-01-17T21:31:49Z", "date_only": false, "value": "2024-01-17T21:31:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/169472", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "1f61035b-b16d-47a5-985f-af1a7141a882", "content": "https://ift.tt/dwV5JSR\nCVE-2023-6548", "url": "https://t.me/ctinow/169472"}, {"timestamp": "2024-01-18T01:12:54.917Z", "date_only": false, "value": "2024-01-18T01:12:54.917Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Citrix", "record": "CVE-2023-6548", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-18T14:00:57.375Z", "date_only": false, "value": "2024-01-18T14:00:57.375485Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-6548", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-18T14:00:57.375Z", "date_only": false, "value": "2024-01-18T14:00:57.375485Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-6548", "record": "FKIE_CVE-2023-6548", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-01-24T00:00:00Z", "date_only": true, "value": "2024-01-24", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-6548", "field": "evidence.0.details.due_date", "uuid": "80c176d4-1003-4516-8d2a-a5970fd9136b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-01-25T16:45:58.287Z", "date_only": false, "value": "2024-01-25T16:45:58.287000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202401-2573", "record": "VAR-202401-2573", "field": "sources_update_date.data.1.date"}, {"timestamp": "2024-01-25T16:45:58.287Z", "date_only": false, "value": "2024-01-25T16:45:58.287", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-6548", "record": "GSD-2023-6548", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-22T00:00:00Z", "date_only": true, "value": "2024-02-22", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-17820", "record": "CNVD-2024-17820", "field": "submitTime"}, {"timestamp": "2024-03-05T17:55:42Z", "date_only": false, "value": "2024-03-05T17:55:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10095", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "fafac7d9-d30e-46d7-840d-b5c88f238d9f", "content": "#exploit\n1. CVE-2024-0519:\nOut-of-bounds memory access vulnerability\nin V8 JavaScript/WebAssembly engines\nhttps://github.com/JohnHormond/CVE-2024-0519-Chrome-exploit\n\n2. CVE-2023-6548:\n0-day for Citrix Netscaler ADC/Gateway latest versions\nhttps://github.com/Roonye660/CVE-2023-6548-POC\n\n3. Whaticket Websocket Exploit\nhttps://github.com/allgood/WhaticketWebsocketExploit", "url": "https://t.me/CyberSecurityTechnologies/10095"}, {"timestamp": "2024-04-12T00:00:00Z", "date_only": false, "value": "2024-04-12T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202401-2573", "record": "VAR-202401-2573", "field": "sources_update_date.data.0.date"}, {"timestamp": "2024-04-12T00:00:00Z", "date_only": true, "value": "2024-04-12", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-17820", "record": "CNVD-2024-17820", "field": "openTime"}, {"timestamp": "2024-04-19T22:57:46.120Z", "date_only": false, "value": "2024-04-19T22:57:46.120000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202401-2573", "record": "VAR-202401-2573", "field": "last_update_date"}, {"timestamp": "2024-07-17T15:49:25.225Z", "date_only": false, "value": "2024-07-17T15:49:25.225853Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/dde1219a-14e2-47e0-9be7-64b42823c889", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "0378c8a8-273d-47e9-bdd8-ec59a7af0148", "url": "https://vulnerability.circl.lu/comment/dde1219a-14e2-47e0-9be7-64b42823c889"}, {"timestamp": "2024-07-20T15:40:04Z", "date_only": false, "value": "2024-07-20T15:40:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackingInsights/6757", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "57863d42-bb5b-49f6-b52d-33f620fb4cdf", "content": "\u200aNHS England Issues Cyber Alert for Exploited CVE-2023-6548 Vulnerability in NetScaler Devices\n\nhttps://securityonline.info/nhs-england-issues-cyber-alert-for-exploited-cve-2023-6548-vulnerability-in-netscaler-devices/", "url": "https://t.me/HackingInsights/6757"}, {"timestamp": "2024-08-02T08:35:14.029Z", "date_only": false, "value": "2024-08-02T08:35:14.029Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-6548", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:03:53.564Z", "date_only": false, "value": "2024-08-15T18:03:53.564+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0133", "record": "WID-SEC-W-2024-0133", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-23T02:10:51Z", "date_only": false, "value": "2025-02-23T02:10:51.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "a7d5f41f-6f4e-409e-bf55-4b5e0e2d7f4d"}, {"timestamp": "2025-10-21T23:05:28.157Z", "date_only": false, "value": "2025-10-21T23:05:28.157Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-6548", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:28.157Z", "date_only": false, "value": "2025-10-21T23:05:28.157Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-6548", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:58Z", "date_only": false, "value": "2025-10-22T00:32:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W4RW-V3MM-HJ8H", "record": "GHSA-W4RW-V3MM-HJ8H", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-6548", "field": "timestamps.recorded_at", "uuid": "80c176d4-1003-4516-8d2a-a5970fd9136b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:42.725Z", "date_only": false, "value": "2026-02-02T12:26:42.725213Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80c176d4-1003-4516-8d2a-a5970fd9136b", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "dab83b3a-9a3a-48b2-a76d-818f3850a89b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80c176d4-1003-4516-8d2a-a5970fd9136b"}, {"timestamp": "2026-06-17T06:50:58.003Z", "date_only": false, "value": "2026-06-17T06:50:58.003", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-6548", "record": "FKIE_CVE-2023-6548", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:43.262Z", "date_only": false, "value": "2026-06-19T12:46:43.262990Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acbdc41b-9fa1-4c54-b8ba-960881ad64ad", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "738e8a94-ed9c-429e-8363-4966de6105df", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acbdc41b-9fa1-4c54-b8ba-960881ad64ad"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-6548", "field": "timestamps.recorded_at", "uuid": "d27a8ae2-b099-434b-888e-ab8c53525dc3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:50.402Z", "date_only": false, "value": "2026-06-23T14:05:50.402567Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d27a8ae2-b099-434b-888e-ab8c53525dc3", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "fe44c413-4ca8-46dc-be2d-ce2568b83ce8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d27a8ae2-b099-434b-888e-ab8c53525dc3"}, {"timestamp": "2026-07-06T11:00:13.787Z", "date_only": false, "value": "2026-07-06T11:00:13.787195Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/144", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "02c364cb-ca80-45d8-ba5f-ff3dddb8634b", "content": "Citrix \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Netscaler\n\n\ud83d\udd11 Citrix \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u0440\u043e\u0447\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u0442\u0447\u0438 \u043d\u0430 Netscaler ADC \u0438 Gateway \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0442\u0438\u043f\u0430 \u00ab\u200ezero-day\u00bb.\n\n\ud83c\udf10 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a CVE-2023-6548 \u0438 CVE-2023-6549, \u0434\u0435\u043b\u0430\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u043a \u0430\u0442\u0430\u043a\u0430\u043c \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udee0 Citrix \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c\u0438 Netscaler \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u044d\u0442\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438 \u0430\u0434\u0430\u043f\u0442\u0438\u0432\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f Citrix \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b.\n\n#CitrixUpdate #NetscalerSecurity #ZeroDayVulnerability #CyberSecurity \n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/144"}, {"timestamp": "2026-09-01T17:00:15.680Z", "date_only": false, "value": "2026-09-01T17:00:15.680286Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7390", "record": "CVE-2023-6548", "field": "creation_timestamp", "uuid": "0069f798-938d-4ad8-a0f8-50bf7ae00c4e", "content": "We wrapped ourselves in ourselves, like closing a cocoon. Will we become butterflies? \ud83e\udee5\nAnyway,\n\nMore Zero-Days !!!\n\u2705 Citrix fixes critical RCE flaws (CVE-2023-6548, CVE-2023-6549) exploited in wild.\n\u2705 VMware Aria Automation bug (CVE-2023-34063) allows attacker control.\n\u2705 Atlassian issues fixes for 24+ flaws, including RCE.\nPatch, Update ASAP: \nhttps://thehackernews.com/2024/01/citrix-vmware-and-atlassian-hit-with.html\n\nDFIR\nInfographics\n\"Log Sources v.1.1\", 12.2023.\nhttps://github.com/Neo23x0/Talks\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n2024.01.21\n\nhttps://www.linkedin.com/posts/alirezaghahrood_we-wrapped-ourselves-in-ourselves-like-closing-activity-7154703304084594688-XZZB?utm_source=share&utm_medium=member_ios", "url": "https://t.me/cissp/7390"}]}