{"metadata": {"vulnerability": "cve-2022-24682", "count": 41, "kinds": {"milestone": 4, "sighting": 11, "kev": 11, "other": 15}}, "data": [{"timestamp": "2022-02-04T00:00:00Z", "date_only": false, "value": "2022-02-04T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-24682", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2022-02-04T00:00:00Z", "date_only": false, "value": "2022-02-04T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24682", "record": "FKIE_CVE-2022-24682", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-24682", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-09T03:19:04Z", "date_only": false, "value": "2022-02-09T03:19:04.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-24682", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-09T03:19:04Z", "date_only": false, "value": "2022-02-09T03:19:04.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-24682", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-02-09T04:15:00Z", "date_only": false, "value": "2022-02-09T04:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FH88-2P7H-7G9H", "record": "GHSA-FH88-2P7H-7G9H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-09T04:15:00Z", "date_only": false, "value": "2022-02-09T04:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-24682", "record": "GSD-2022-24682", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-09T04:15:07.400Z", "date_only": false, "value": "2022-02-09T04:15:07.400", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24682", "record": "FKIE_CVE-2022-24682", "field": "published"}, {"timestamp": "2022-02-09T07:12:32Z", "date_only": false, "value": "2022-02-09T07:12:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/37046", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "cecc9100-486f-4fb0-a748-d97d425998b4", "content": "\u203c CVE-2022-24682 \u203c\n\nAn issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/37046"}, {"timestamp": "2022-02-10T00:00:32Z", "date_only": false, "value": "2022-02-10T00:00:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FH88-2P7H-7G9H", "record": "GHSA-FH88-2P7H-7G9H", "field": "published"}, {"timestamp": "2022-02-11T17:23:00Z", "date_only": false, "value": "2022-02-11T17:23Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-24682", "record": "GSD-2022-24682", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-24682", "field": "timestamps.asserted_at", "uuid": "b455d80b-c6e7-4ae7-afb4-f233bfeffe0f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-24682", "field": "timestamps.asserted_at", "uuid": "c44e47e5-dfd1-46f5-b62c-71c9f95103c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": true, "value": "2022-02-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-24682", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": true, "value": "2022-02-25", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2022-24682", "record": "GSD-2022-24682", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-24682", "field": "evidence.0.details.added_date", "uuid": "c44e47e5-dfd1-46f5-b62c-71c9f95103c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": true, "value": "2022-02-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-24682", "field": "evidence.0.details.date_added", "uuid": "b455d80b-c6e7-4ae7-afb4-f233bfeffe0f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-24682", "field": "timestamps.first_seen_at", "uuid": "b455d80b-c6e7-4ae7-afb4-f233bfeffe0f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-24682", "field": "timestamps.first_seen_at", "uuid": "c44e47e5-dfd1-46f5-b62c-71c9f95103c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-24682", "field": "status.status_updated_at", "uuid": "b455d80b-c6e7-4ae7-afb4-f233bfeffe0f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-24682", "field": "status.status_updated_at", "uuid": "c44e47e5-dfd1-46f5-b62c-71c9f95103c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-11T00:00:00Z", "date_only": true, "value": "2022-03-11", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-24682", "field": "evidence.0.details.due_date", "uuid": "b455d80b-c6e7-4ae7-afb4-f233bfeffe0f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-11T00:00:00Z", "date_only": true, "value": "2022-03-11", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2022-24682", "record": "GSD-2022-24682", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "3b7a9db3-bb2c-4f49-8e98-a0e9487d4a85"}, {"timestamp": "2023-12-13T01:19:42.845Z", "date_only": false, "value": "2023-12-13T01:19:42.845990Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24682", "record": "GSD-2022-24682", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T04:20:50.185Z", "date_only": false, "value": "2024-08-03T04:20:50.185Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-24682", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:26:45.726Z", "date_only": false, "value": "2024-12-24T20:26:45.726287Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971267", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "3c77a6ba-1d97-4f30-a40f-e9b909dd7eb7", "url": "https://feedsin.space/feed/CISAKevBot/items/2971267"}, {"timestamp": "2025-01-30T01:12:15Z", "date_only": false, "value": "2025-01-30T01:12:15.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/3432", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "179980f5-4c33-49ad-9d94-077d62dbda54", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-24682\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside element attributes. This markup becomes unescaped, causing arbitrary markup to be injected into the document.\n\ud83d\udccf Published: 2022-02-10T00:00:32Z\n\ud83d\udccf Modified: 2025-01-30T00:31:03Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2022-24682\n2. https://blog.zimbra.com/2022/02/hotfix-available-5-feb-for-zero-day-exploit-vulnerability-in-zimbra-8-8-15\n3. https://wiki.zimbra.com/wiki/Security_Center\n4. https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P30\n5. https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories\n6. https://www.volexity.com/blog/2022/02/03/operation-emailthief-active-exploitation-of-zero-day-xss-vulnerability-in-zimbra", "url": "https://t.me/DarkWebInformer_CVEAlerts/3432"}, {"timestamp": "2025-01-30T02:17:49Z", "date_only": false, "value": "2025-01-30T02:17:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/TjxFwHmixzj4RS2b5tsZvLt1Z9ESQD7FQxj8-_8JyXRlxKWL", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "741b3420-a426-45a7-afd7-2e784c77ff7d"}, {"timestamp": "2025-02-23T02:10:35Z", "date_only": false, "value": "2025-02-23T02:10:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "12377a69-9ff7-4a68-8c19-dd9999400d77"}, {"timestamp": "2025-10-09T18:15:44Z", "date_only": false, "value": "2025-10-09T18:15:44.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-24682.yaml", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "5812a2da-acd5-46e0-a827-933c5e102f38", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-24682.yaml"}, {"timestamp": "2025-10-13T21:02:41.336Z", "date_only": false, "value": "2025-10-13T21:02:41.336399Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m344f7rrkk2a", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "6144f8e2-a87e-4d95-863d-ddd50bea1820", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m344f7rrkk2a"}, {"timestamp": "2025-10-22T00:32:28Z", "date_only": false, "value": "2025-10-22T00:32:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FH88-2P7H-7G9H", "record": "GHSA-FH88-2P7H-7G9H", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-24682", "field": "timestamps.recorded_at", "uuid": "b455d80b-c6e7-4ae7-afb4-f233bfeffe0f", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:28:22.072Z", "date_only": false, "value": "2026-02-02T12:28:22.072502Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b455d80b-c6e7-4ae7-afb4-f233bfeffe0f", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "f08dabdd-16c2-4281-8140-e5d1b272930f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b455d80b-c6e7-4ae7-afb4-f233bfeffe0f"}, {"timestamp": "2026-06-19T12:47:37.330Z", "date_only": false, "value": "2026-06-19T12:47:37.330941Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/27d5fbf9-4f8f-40c4-ae4f-1c7babee44cc", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "8354dd0f-8a12-445c-8402-2438aa689f19", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/27d5fbf9-4f8f-40c4-ae4f-1c7babee44cc"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-24682", "field": "timestamps.recorded_at", "uuid": "c44e47e5-dfd1-46f5-b62c-71c9f95103c7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:04:58.109Z", "date_only": false, "value": "2026-06-23T14:04:58.109955Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c44e47e5-dfd1-46f5-b62c-71c9f95103c7", "record": "CVE-2022-24682", "field": "creation_timestamp", "uuid": "d59fbc5f-02f0-4a45-b212-5c34b5a4ba13", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c44e47e5-dfd1-46f5-b62c-71c9f95103c7"}, {"timestamp": "2026-08-07T03:55:20.799Z", "date_only": false, "value": "2026-08-07T03:55:20.799Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-24682", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-07T03:55:20.799Z", "date_only": false, "value": "2026-08-07T03:55:20.799Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-24682", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-07T05:16:55.740Z", "date_only": false, "value": "2026-08-07T05:16:55.740", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24682", "record": "FKIE_CVE-2022-24682", "field": "lastModified"}]}