{"metadata": {"vulnerability": "cve-2018-1313", "count": 48, "kinds": {"milestone": 21, "sighting": 1, "kev": 0, "other": 26}}, "data": [{"timestamp": "2017-12-07T00:00:00Z", "date_only": false, "value": "2017-12-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2018-1313", "field": "cveMetadata.dateReserved"}, {"timestamp": "2018-05-05T00:00:00Z", "date_only": false, "value": "2018-05-05T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / apache", "record": "cve-2018-1313", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2018-05-05T00:00:00Z", "date_only": false, "value": "2018-05-05T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2018-1313", "record": "GSD-2018-1313", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2018-05-05T00:00:00Z", "date_only": false, "value": "2018-05-05T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / apache", "record": "cve-2018-1313", "field": "containers.cna.datePublic"}, {"timestamp": "2018-05-07T00:00:00Z", "date_only": true, "value": "2018-05-07", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2018-1313", "record": "GSD-2018-1313", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2018-05-07T13:00:00Z", "date_only": false, "value": "2018-05-07T13:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2018-1313", "field": "cveMetadata.datePublished"}, {"timestamp": "2018-05-07T13:29:00Z", "date_only": false, "value": "2018-05-07T13:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-42XW-P62X-HWCF", "record": "GHSA-42XW-P62X-HWCF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2018-05-07T13:29:00Z", "date_only": false, "value": "2018-05-07T13:29:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2018-1313", "record": "UBUNTU-CVE-2018-1313", "field": "published"}, {"timestamp": "2018-05-07T13:29:00Z", "date_only": false, "value": "2018-05-07T13:29Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2018-1313", "record": "GSD-2018-1313", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2018-05-07T13:29:00.267Z", "date_only": false, "value": "2018-05-07T13:29:00.267", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-1313", "record": "FKIE_CVE-2018-1313", "field": "published"}, {"timestamp": "2018-05-09T00:00:00Z", "date_only": true, "value": "2018-05-09", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2018-09148", "record": "CNVD-2018-09148", "field": "openTime"}, {"timestamp": "2018-05-09T00:00:00Z", "date_only": true, "value": "2018-05-09", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2018-09148", "record": "CNVD-2018-09148", "field": "submitTime"}, {"timestamp": "2019-10-17T00:00:00Z", "date_only": true, "value": "2019-10-17", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2018-1313", "record": "GSD-2018-1313", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2020-10-14T00:00:00Z", "date_only": false, "value": "2020-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-638", "record": "CERTFR-2020-AVI-638", "field": "revisions.0.revision_date"}, {"timestamp": "2021-10-07T08:06:08Z", "date_only": false, "value": "2021-10-07T08:06:08.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2018-1313", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-04-18T17:30:00Z", "date_only": false, "value": "2022-04-18T17:30Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2018-1313", "record": "GSD-2018-1313", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-13T01:02:18Z", "date_only": false, "value": "2022-05-13T01:02:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-42XW-P62X-HWCF", "record": "GHSA-42XW-P62X-HWCF", "field": "published"}, {"timestamp": "2022-06-18T11:47:22Z", "date_only": false, "value": "2022-06-18T11:47:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/204", "record": "CVE-2018-1313", "field": "creation_timestamp", "uuid": "9a4aadb5-6e9f-40fd-a0cd-15dc98b29e17", "content": "#exploit\n1. CVE-2018-1304:\nSecurity constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1-9.0.4, 8.5.0-8.5.27, 8.0.0.RC1-8.0.49, 7.0.0-7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in this way apply to the URL pattern and any URLs below that point, it was possible - depending on the order Servlets were loaded - for some security constraints not to be applied. This could have exposed resources to users who were not authorised to access them\nhttps://github.com/knqyf263/CVE-2018-1304\nhttps://github.com/thariyarox/tomcat_CVE-2018-1304_testing \n\n2. CVE-2018-1306:\nThe PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload\nhttps://github.com/JJSO12/Apache-Pluto-3.0.0--CVE-2018-1306 \n\n3. CVE-2018-1313:\nIn Apache Derby 10.3.1.4-10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control\nhttps://github.com/tafamace/CVE-2018-1313", "url": "https://t.me/CyberSecurityTechnologies/204"}, {"timestamp": "2022-06-29T19:13:33Z", "date_only": false, "value": "2022-06-29T19:13:33Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-42XW-P62X-HWCF", "record": "GHSA-42XW-P62X-HWCF", "field": "modified"}, {"timestamp": "2022-07-26T11:05:03Z", "date_only": false, "value": "2022-07-26T11:05:03Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-1780", "record": "OESA-2022-1780", "field": "published"}, {"timestamp": "2023-12-13T01:22:37.308Z", "date_only": false, "value": "2023-12-13T01:22:37.308507Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2018-1313", "record": "GSD-2018-1313", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-28T00:00:00Z", "date_only": true, "value": "2024-05-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0459", "record": "CERTFR-2024-AVI-0459", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2024-05-29T00:00:00Z", "date_only": true, "value": "2024-05-29", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0459", "record": "CERTFR-2024-AVI-0459", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-05-31T00:00:00Z", "date_only": false, "value": "2024-05-31T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0459", "record": "CERTFR-2024-AVI-0459", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-05T03:59:39.045Z", "date_only": false, "value": "2024-08-05T03:59:39.045Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2018-1313", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T16:23:24.352Z", "date_only": false, "value": "2024-09-16T16:23:24.352Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2018-1313", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-24T04:46:45Z", "date_only": false, "value": "2025-10-24T04:46:45Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2018-1313", "record": "UBUNTU-CVE-2018-1313", "field": "modified"}, {"timestamp": "2026-06-17T01:50:59.837Z", "date_only": false, "value": "2026-06-17T01:50:59.837", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2018-1313", "record": "FKIE_CVE-2018-1313", "field": "lastModified"}, {"timestamp": "2026-08-06T11:05:03Z", "date_only": false, "value": "2026-08-06T11:05:03Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-1780", "record": "OESA-2022-1780", "field": "modified"}, {"timestamp": "2026-09-07T00:00:00Z", "date_only": true, "value": "2026-09-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": true, "value": "2026-09-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": true, "value": "2026-09-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "last_revision_date"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": true, "value": "2026-09-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "revisions.0.revision_date"}, {"timestamp": "2026-09-21T00:00:00Z", "date_only": true, "value": "2026-09-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-09-22T00:00:00Z", "date_only": true, "value": "2026-09-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-09-23T00:00:00Z", "date_only": true, "value": "2026-09-23", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-24T00:00:00Z", "date_only": true, "value": "2026-09-24", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "last_revision_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "initial_release_date"}, {"timestamp": "2026-09-25T00:00:00Z", "date_only": false, "value": "2026-09-25T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1233", "record": "CERTFR-2026-AVI-1233", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-02T00:00:00Z", "date_only": true, "value": "2026-10-02", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1291", "record": "CERTFR-2026-AVI-1291", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-10-05T00:00:00Z", "date_only": true, "value": "2026-10-05", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1291", "record": "CERTFR-2026-AVI-1291", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1291", "record": "CERTFR-2026-AVI-1291", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1291", "record": "CERTFR-2026-AVI-1291", "field": "last_revision_date"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1291", "record": "CERTFR-2026-AVI-1291", "field": "initial_release_date"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1291", "record": "CERTFR-2026-AVI-1291", "field": "revisions.0.revision_date"}]}