{"metadata": {"vulnerability": "cve-2022-35653", "count": 44, "kinds": {"milestone": 6, "sighting": 11, "kev": 11, "other": 16}}, "data": [{"timestamp": "2022-07-12T00:00:00Z", "date_only": false, "value": "2022-07-12T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-35653", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-18T00:00:00Z", "date_only": false, "value": "2022-07-18T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-653", "record": "CERTFR-2022-AVI-653", "field": "revisions.0.revision_date"}, {"timestamp": "2022-07-21T00:00:00Z", "date_only": true, "value": "2022-07-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-54914", "record": "CNVD-2022-54914", "field": "submitTime"}, {"timestamp": "2022-07-25T00:00:00Z", "date_only": true, "value": "2022-07-25", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-35653", "record": "GSD-2022-35653", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-07-25T15:33:11Z", "date_only": false, "value": "2022-07-25T15:33:11+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-35653", "field": "timestamps.asserted_at", "uuid": "208080f3-1942-49a3-90ec-c71a9a7093f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-25T15:33:11Z", "date_only": false, "value": "2022-07-25T15:33:11.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-35653", "field": "evidence.0.details.added_date", "uuid": "208080f3-1942-49a3-90ec-c71a9a7093f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-25T15:33:11Z", "date_only": false, "value": "2022-07-25T15:33:11+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-35653", "field": "timestamps.first_seen_at", "uuid": "208080f3-1942-49a3-90ec-c71a9a7093f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-25T15:33:11Z", "date_only": false, "value": "2022-07-25T15:33:11.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-35653", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-07-25T15:33:11Z", "date_only": false, "value": "2022-07-25T15:33:11+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-35653", "field": "status.status_updated_at", "uuid": "208080f3-1942-49a3-90ec-c71a9a7093f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-07-25T16:15:00Z", "date_only": false, "value": "2022-07-25T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-62WH-M4JR-233R", "record": "GHSA-62WH-M4JR-233R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-07-25T16:15:00Z", "date_only": false, "value": "2022-07-25T16:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-35653", "record": "UBUNTU-CVE-2022-35653", "field": "published"}, {"timestamp": "2022-07-25T16:15:00Z", "date_only": false, "value": "2022-07-25T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-35653", "record": "GSD-2022-35653", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-07-25T16:15:08.520Z", "date_only": false, "value": "2022-07-25T16:15:08.520", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35653", "record": "FKIE_CVE-2022-35653", "field": "published"}, {"timestamp": "2022-07-25T20:33:13Z", "date_only": false, "value": "2022-07-25T20:33:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/46937", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "08d39920-b089-49d3-9784-5b6d53f58bd4", "content": "\u203c CVE-2022-35653 \u203c\n\nA reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/46937"}, {"timestamp": "2022-07-26T00:00:30Z", "date_only": false, "value": "2022-07-26T00:00:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-62WH-M4JR-233R", "record": "GHSA-62WH-M4JR-233R", "field": "published"}, {"timestamp": "2022-07-27T04:06:31Z", "date_only": false, "value": "2022-07-27T04:06:31.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fedora", "record": "cve-2022-35653", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-07-28T20:24:00Z", "date_only": false, "value": "2022-07-28T20:24Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-35653", "record": "GSD-2022-35653", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-08-03T00:00:00Z", "date_only": true, "value": "2022-08-03", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-54914", "record": "CNVD-2022-54914", "field": "openTime"}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": true, "value": "2022-12-21", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-35653", "record": "GSD-2022-35653", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-11-17T04:55:23Z", "date_only": false, "value": "2023-11-17T04:55:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/203", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "cf98ea61-c896-4191-8f5e-3e0bd87b408e", "content": "#ExploitObserverAlert\n\nCVE-2022-35653\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2022-35653. A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website to steal potentially sensitive information, change appearance of the web page, can perform phishing and drive-by-download attacks. This vulnerability does not impact authenticated users.\n\nFIRST-EPSS: 0.006730000\nNVD-IS: 2.7\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/203"}, {"timestamp": "2023-12-13T01:19:33.885Z", "date_only": false, "value": "2023-12-13T01:19:33.885917Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-35653", "record": "GSD-2022-35653", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-15T14:49:48Z", "date_only": false, "value": "2024-02-15T14:49:48+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-35653", "field": "timestamps.asserted_at", "uuid": "e3a88fa0-4d5c-4f11-b87c-99860674ca9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-02-15T14:49:48Z", "date_only": false, "value": "2024-02-15T14:49:48+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-35653", "field": "timestamps.first_seen_at", "uuid": "e3a88fa0-4d5c-4f11-b87c-99860674ca9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-03-06T11:03:16.888Z", "date_only": false, "value": "2024-03-06T11:03:16.888Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MOODLE-2022-35653", "record": "BIT-MOODLE-2022-35653", "field": "published"}, {"timestamp": "2024-04-24T17:30:34Z", "date_only": false, "value": "2024-04-24T17:30:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-62WH-M4JR-233R", "record": "GHSA-62WH-M4JR-233R", "field": "modified"}, {"timestamp": "2024-08-03T09:36:44.402Z", "date_only": false, "value": "2024-08-03T09:36:44.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-35653", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T09:36:44.402Z", "date_only": false, "value": "2024-08-03T09:36:44.402Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-35653", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "a6b602f2-7c5c-4073-a0be-542cca9cc21d"}, {"timestamp": "2025-02-04T00:00:00Z", "date_only": false, "value": "2025-02-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-04)", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "30e88aa3-0920-4600-a3e8-005ea22f1f95"}, {"timestamp": "2026-04-30T03:00:55Z", "date_only": false, "value": "2026-04-30T03:00:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nguyenvietphat-0302/105c79ab797c054b1bc4ec1b9beb4aaf", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "dc066c3c-cf3e-441d-8099-8631f1b6d574", "url": "https://gist.github.com/nguyenvietphat-0302/105c79ab797c054b1bc4ec1b9beb4aaf"}, {"timestamp": "2026-06-17T04:52:02.137Z", "date_only": false, "value": "2026-06-17T04:52:02.137", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35653", "record": "FKIE_CVE-2022-35653", "field": "lastModified"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-35653", "field": "timestamps.recorded_at", "uuid": "208080f3-1942-49a3-90ec-c71a9a7093f2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:06:15.272Z", "date_only": false, "value": "2026-06-23T14:06:15.272772Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/208080f3-1942-49a3-90ec-c71a9a7093f2", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "3d5f8b76-971b-4ec6-a562-2806d59c3659", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/208080f3-1942-49a3-90ec-c71a9a7093f2"}, {"timestamp": "2026-06-30T09:23:46.263Z", "date_only": false, "value": "2026-06-30T09:23:46.263228Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3a88fa0-4d5c-4f11-b87c-99860674ca9a", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "58a8df7f-af92-4f22-a852-f863f0866fe0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e3a88fa0-4d5c-4f11-b87c-99860674ca9a"}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": false, "value": "2026-07-17T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-35653", "field": "timestamps.last_seen_at", "uuid": "e3a88fa0-4d5c-4f11-b87c-99860674ca9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": true, "value": "2026-07-17", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-35653", "field": "evidence.0.details.observation_date", "uuid": "e3a88fa0-4d5c-4f11-b87c-99860674ca9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-17T00:00:00Z", "date_only": false, "value": "2026-07-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-35653", "field": "status.status_updated_at", "uuid": "e3a88fa0-4d5c-4f11-b87c-99860674ca9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T01:00:01Z", "date_only": false, "value": "2026-07-19T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-35653", "field": "timestamps.recorded_at", "uuid": "e3a88fa0-4d5c-4f11-b87c-99860674ca9a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-01T20:00:26.763Z", "date_only": false, "value": "2026-09-01T20:00:26.763887Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/151853", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "5fea1bcc-c697-455e-a2d0-a4bbb9d75138", "content": "How I Found Reflected XSS Vulnerability on Australian Government. [CVE-2022\u201335653]\nhttps://systemweakness.com/how-i-found-reflected-xss-vulnerability-on-australian-government-cve-2022-35653-ead0e56db243?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/151853"}, {"timestamp": "2026-09-01T20:00:26.806Z", "date_only": false, "value": "2026-09-01T20:00:26.806558Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/151855", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "dfe743c8-c2f5-468c-9230-025426b4af27", "content": "\ud83d\udea8 Important: I didn\u2019t hack anything. I just used Recon with some Automation the right way.Continue reading on System Weakness \u00bb (https://systemweakness.com/how-i-found-reflected-xss-vulnerability-on-australian-government-cve-2022-35653-ead0e56db243?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/151855"}, {"timestamp": "2026-09-03T14:00:05.413Z", "date_only": false, "value": "2026-09-03T14:00:05.413910Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/151855", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "3f64fa7a-a2d8-4c0d-aa7f-761c972de664", "content": "\ud83d\udea8 Important: I didn\u2019t hack anything. I just used Recon with some Automation the right way.Continue reading on System Weakness \u00bb (https://systemweakness.com/how-i-found-reflected-xss-vulnerability-on-australian-government-cve-2022-35653-ead0e56db243?source=rss------bug_bounty-5)", "url": "https://t.me/hacking_Attack/151855"}, {"timestamp": "2026-09-03T14:00:05.467Z", "date_only": false, "value": "2026-09-03T14:00:05.467130Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/151853", "record": "CVE-2022-35653", "field": "creation_timestamp", "uuid": "2512a0a6-2090-4ae7-a0e2-f4eafe195ba3", "content": "How I Found Reflected XSS Vulnerability on Australian Government. [CVE-2022\u201335653]\nhttps://systemweakness.com/how-i-found-reflected-xss-vulnerability-on-australian-government-cve-2022-35653-ead0e56db243?source=rss------bug_bounty-5", "url": "https://t.me/hacking_Attack/151853"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MOODLE-2022-35653", "record": "BIT-MOODLE-2022-35653", "field": "modified"}, {"timestamp": "2026-09-23T15:40:02Z", "date_only": false, "value": "2026-09-23T15:40:02Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-35653", "record": "UBUNTU-CVE-2022-35653", "field": "modified"}]}