{"metadata": {"vulnerability": "cve-2023-5631", "count": 71, "kinds": {"milestone": 9, "sighting": 17, "kev": 11, "other": 34}}, "data": [{"timestamp": "2023-10-16T22:00:00Z", "date_only": false, "value": "2023-10-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-16T22:00:00Z", "date_only": false, "value": "2023-10-16T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-16T22:00:00Z", "date_only": false, "value": "2023-10-16T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-10-18T06:50:57.504Z", "date_only": false, "value": "2023-10-18T06:50:57.504Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-5631", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-10-18T14:51:18.443Z", "date_only": false, "value": "2023-10-18T14:51:18.443Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-5631", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-10-18T15:15:00Z", "date_only": false, "value": "2023-10-18T15:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-5631", "record": "UBUNTU-CVE-2023-5631", "field": "published"}, {"timestamp": "2023-10-18T15:15:08Z", "date_only": false, "value": "2023-10-18T15:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QF8F-27CP-GW76", "record": "GHSA-QF8F-27CP-GW76", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-18T15:15:08.727Z", "date_only": false, "value": "2023-10-18T15:15:08.727", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5631", "record": "FKIE_CVE-2023-5631", "field": "published"}, {"timestamp": "2023-10-18T15:15:08.727Z", "date_only": false, "value": "2023-10-18T15:15:08.727", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-5631", "record": "GSD-2023-5631", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-10-18T15:30:24Z", "date_only": false, "value": "2023-10-18T15:30:24Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QF8F-27CP-GW76", "record": "GHSA-QF8F-27CP-GW76", "field": "published"}, {"timestamp": "2023-10-18T18:33:48Z", "date_only": false, "value": "2023-10-18T18:33:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/72528", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "95971846-42f7-4267-b047-5aad3e062df6", "content": "\u203c CVE-2023-5631 \u203c\n\nRoundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attackerto load arbitrary JavaScript code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/72528"}, {"timestamp": "2023-10-18T22:00:00Z", "date_only": false, "value": "2023-10-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-22T22:00:00Z", "date_only": false, "value": "2023-10-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-10-24T22:00:00Z", "date_only": false, "value": "2023-10-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-10-25T14:46:34Z", "date_only": false, "value": "2023-10-25T14:46:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/145309", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "d5020a78-c00b-464d-9850-d010b8d574b5", "content": "https://ift.tt/SZyVQn6\nRoundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)", "url": "https://t.me/ctinow/145309"}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-5631", "field": "timestamps.asserted_at", "uuid": "72b2c094-241b-4afb-89a0-01810c8aa47b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-5631", "field": "timestamps.asserted_at", "uuid": "0540f4b4-d18f-42ac-a0c5-bed427623e2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": true, "value": "2023-10-26", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-5631", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-5631", "field": "evidence.0.details.added_date", "uuid": "0540f4b4-d18f-42ac-a0c5-bed427623e2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": true, "value": "2023-10-26", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-5631", "field": "evidence.0.details.date_added", "uuid": "72b2c094-241b-4afb-89a0-01810c8aa47b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-5631", "field": "timestamps.first_seen_at", "uuid": "72b2c094-241b-4afb-89a0-01810c8aa47b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-5631", "field": "timestamps.first_seen_at", "uuid": "0540f4b4-d18f-42ac-a0c5-bed427623e2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0893", "record": "CERTFR-2023-AVI-0893", "field": "revisions.0.revision_date"}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-5631", "field": "status.status_updated_at", "uuid": "72b2c094-241b-4afb-89a0-01810c8aa47b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-5631", "field": "status.status_updated_at", "uuid": "0540f4b4-d18f-42ac-a0c5-bed427623e2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-26T00:00:00Z", "date_only": false, "value": "2023-10-26T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-5631", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-10-26T18:10:02Z", "date_only": false, "value": "2023-10-26T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "093e7b73-7a80-4dd9-8a63-84abf1b25255"}, {"timestamp": "2023-10-26T22:00:00Z", "date_only": false, "value": "2023-10-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-11-02T11:05:52Z", "date_only": false, "value": "2023-11-02T11:05:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0345-1", "record": "OPENSUSE-SU-2023:0345-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-02T11:05:52Z", "date_only": false, "value": "2023-11-02T11:05:52Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0345-1", "record": "OPENSUSE-SU-2023:0345-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-02T11:05:52Z", "date_only": false, "value": "2023-11-02T11:05:52Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0345-1", "record": "OPENSUSE-SU-2023:0345-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-11-02T11:05:52Z", "date_only": false, "value": "2023-11-02T11:05:52Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0345-1", "record": "OPENSUSE-SU-2023:0345-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-15T16:39:21.592Z", "date_only": false, "value": "2023-11-15T16:39:21.592115Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-5631", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2023-11-15T16:39:21.592Z", "date_only": false, "value": "2023-11-15T16:39:21.592115Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5631", "record": "FKIE_CVE-2023-5631", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2023-11-16T00:00:00Z", "date_only": true, "value": "2023-11-16", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-5631", "field": "evidence.0.details.due_date", "uuid": "72b2c094-241b-4afb-89a0-01810c8aa47b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-11-17T15:06:13.428Z", "date_only": false, "value": "2023-11-17T15:06:13.428Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ESET", "record": "cve-2023-5631", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-04T23:02:37Z", "date_only": false, "value": "2023-12-04T23:02:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1327", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "f35ea1bf-2a0e-402c-8df4-924a20c29d8c", "content": "#ExploitObserverAlert\n\nCVE-2023-5631\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-5631. Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker  to load arbitrary JavaScript code.\n\nFIRST-EPSS: 0.009860000\nNVD-IS: 2.7\nNVD-ES: 2.3", "url": "https://t.me/arpsyndicate/1327"}, {"timestamp": "2023-12-13T01:20:50.475Z", "date_only": false, "value": "2023-12-13T01:20:50.475765Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-5631", "record": "GSD-2023-5631", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-22T18:55:30.400Z", "date_only": false, "value": "2023-12-22T18:55:30.400", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-5631", "record": "GSD-2023-5631", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-15T07:55:48Z", "date_only": false, "value": "2024-01-15T07:55:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2767", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "c3743a00-f5c1-4313-b6f7-dcebf8c6592f", "content": "#ExploitObserverAlert\n\nCVE-2023-5631\n\nDESCRIPTION: Exploit Observer has 14 entries in 3 file formats related to CVE-2023-5631. Roundcube before 1.4.15, 1.5.x before 1.5.5, and 1.6.x before 1.6.4 allows stored XSS via an HTML e-mail message with a crafted SVG document because of program/lib/Roundcube/rcube_washtml.php behavior. This could allow a remote attacker  to load arbitrary JavaScript code.\n\nFIRST-EPSS: 0.006800000\nNVD-IS: 2.7\nNVD-ES: 2.3", "url": "https://t.me/arpsyndicate/2767"}, {"timestamp": "2024-02-24T12:31:27Z", "date_only": false, "value": "2024-02-24T12:31:27.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/31685ccf-84b1-4db8-8f3a-87d84edbf74d", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "266a55f2-0161-4809-aa14-c39972031ef5"}, {"timestamp": "2024-02-29T13:53:00Z", "date_only": false, "value": "2024-02-29T13:53:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0f810383-867c-42c6-ba59-2c5e4cfacbce", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "55276e07-55fe-4d69-aa77-54f9568804f1"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13365-1", "record": "OPENSUSE-SU-2024:13365-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13365-1", "record": "OPENSUSE-SU-2024:13365-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13365-1", "record": "OPENSUSE-SU-2024:13365-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13365-1", "record": "OPENSUSE-SU-2024:13365-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-25T22:00:00Z", "date_only": false, "value": "2024-06-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2024-06-25T22:00:00Z", "date_only": false, "value": "2024-06-25T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-02T08:07:32.513Z", "date_only": false, "value": "2024-08-02T08:07:32.513Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-5631", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:59:55.436Z", "date_only": false, "value": "2024-08-15T17:59:55.436+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2657", "record": "WID-SEC-W-2023-2657", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-24T20:35:30.684Z", "date_only": false, "value": "2024-12-24T20:35:30.684361Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971908", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "4415df44-9337-4dd3-827c-52ad25bdd1ac", "url": "https://feedsin.space/feed/CISAKevBot/items/2971908"}, {"timestamp": "2025-02-23T02:10:48Z", "date_only": false, "value": "2025-02-23T02:10:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "bacdde71-f693-4a20-9960-13784c212de7"}, {"timestamp": "2025-10-21T23:05:34.074Z", "date_only": false, "value": "2025-10-21T23:05:34.074Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-5631", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:05:34.074Z", "date_only": false, "value": "2025-10-21T23:05:34.074Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-5631", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:51Z", "date_only": false, "value": "2025-10-22T00:32:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QF8F-27CP-GW76", "record": "GHSA-QF8F-27CP-GW76", "field": "modified"}, {"timestamp": "2025-10-24T05:01:36Z", "date_only": false, "value": "2025-10-24T05:01:36Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-5631", "record": "UBUNTU-CVE-2023-5631", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-5631", "field": "timestamps.recorded_at", "uuid": "72b2c094-241b-4afb-89a0-01810c8aa47b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:48.016Z", "date_only": false, "value": "2026-02-02T12:26:48.016922Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72b2c094-241b-4afb-89a0-01810c8aa47b", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "ba7065c5-5da6-49fc-a578-7dc62158de4b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72b2c094-241b-4afb-89a0-01810c8aa47b"}, {"timestamp": "2026-06-17T06:48:58.673Z", "date_only": false, "value": "2026-06-17T06:48:58.673", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5631", "record": "FKIE_CVE-2023-5631", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:46.888Z", "date_only": false, "value": "2026-06-19T12:46:46.888380Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c5ccb668-0ada-462f-86a4-cca8fde4e28a", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "bf503c7d-d25e-4e7c-92f2-51c9735d58de", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c5ccb668-0ada-462f-86a4-cca8fde4e28a"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-5631", "field": "timestamps.recorded_at", "uuid": "0540f4b4-d18f-42ac-a0c5-bed427623e2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:47.118Z", "date_only": false, "value": "2026-06-23T14:05:47.118516Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0540f4b4-d18f-42ac-a0c5-bed427623e2e", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "9fb0d276-45de-48f0-acda-96428e42e788", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0540f4b4-d18f-42ac-a0c5-bed427623e2e"}, {"timestamp": "2026-07-06T11:00:15.323Z", "date_only": false, "value": "2026-07-06T11:00:15.323707Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/76", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "c0862b0e-bea6-4848-b031-2a0d4868d8c0", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\ud83d\udc68\u200d\ud83d\udcbb \u0413\u0440\u0443\u043f\u043f\u0430 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 Winter Vivern \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0439 Roundcube Webmail, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434.\n\n\ud83d\udcea \u0426\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0430\u0436\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u0438\u0437 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0436\u0435\u0440\u0442\u0432. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 Base64, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u0432 \u043e\u043a\u043d\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS).\n\n\ud83d\udc71\u200d\u2642\ufe0f \u0413\u0440\u0443\u043f\u043f\u0430 Winter Vivern \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0441\u0432\u043e\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u044b, \u041f\u043e\u043b\u044c\u0448\u0438, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u0439 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u0418\u043d\u0434\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442, \u0438\u043c\u0435\u0435\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-5631 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 14 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n#WinterVivern #Roundcube #XSS #0day\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/76"}, {"timestamp": "2026-07-08T09:15:02.267Z", "date_only": false, "value": "2026-07-08T09:15:02.267854Z", "kind": "sighting", "label": "Seen", "source": "MISP/0f810383-867c-42c6-ba59-2c5e4cfacbce", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "a7f3f4fa-fee4-4047-aebc-951ab455e35e"}, {"timestamp": "2026-07-09T00:15:03.133Z", "date_only": false, "value": "2026-07-09T00:15:03.133171Z", "kind": "sighting", "label": "Seen", "source": "MISP/0f810383-867c-42c6-ba59-2c5e4cfacbce", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "8e485b8f-3d7d-4867-8460-42ff43387c7c"}, {"timestamp": "2026-07-10T00:15:04.354Z", "date_only": false, "value": "2026-07-10T00:15:04.354878Z", "kind": "sighting", "label": "Seen", "source": "MISP/0f810383-867c-42c6-ba59-2c5e4cfacbce", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "ed2a597e-c2e7-4824-b28f-1daa93e0b254"}, {"timestamp": "2026-07-12T05:00:04.952Z", "date_only": false, "value": "2026-07-12T05:00:04.952912Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/76", "record": "CVE-2023-5631", "field": "creation_timestamp", "uuid": "71ee08e0-19e3-4e5e-9fdc-9961939fe25d", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f\n\n\ud83d\udc68\u200d\ud83d\udcbb \u0413\u0440\u0443\u043f\u043f\u0430 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 Winter Vivern \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u043f\u043e\u0447\u0442\u043e\u0439 Roundcube Webmail, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 JavaScript-\u043a\u043e\u0434.\n\n\ud83d\udcea \u0426\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0430\u0436\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043f\u0438\u0441\u0435\u043c \u0438\u0437 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432 \u0436\u0435\u0440\u0442\u0432. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0435 Base64, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u0432 \u043e\u043a\u043d\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS).\n\n\ud83d\udc71\u200d\u2642\ufe0f \u0413\u0440\u0443\u043f\u043f\u0430 Winter Vivern \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0441\u0432\u043e\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0423\u043a\u0440\u0430\u0438\u043d\u044b, \u041f\u043e\u043b\u044c\u0448\u0438, \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u0439 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u0418\u043d\u0434\u0438\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442, \u0438\u043c\u0435\u0435\u0442 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-5631 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 14 \u043e\u043a\u0442\u044f\u0431\u0440\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430.\n\n#WinterVivern #Roundcube #XSS #0day\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/76"}, {"timestamp": "2026-09-20T19:47:04Z", "date_only": false, "value": "2026-09-20T19:47:04Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0345-1", "record": "OPENSUSE-SU-2023:0345-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:47:04Z", "date_only": false, "value": "2026-09-20T19:47:04Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0345-1", "record": "OPENSUSE-SU-2023:0345-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:59:14Z", "date_only": false, "value": "2026-09-20T20:59:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13365-1", "record": "OPENSUSE-SU-2024:13365-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:59:14Z", "date_only": false, "value": "2026-09-20T20:59:14Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13365-1", "record": "OPENSUSE-SU-2024:13365-1", "field": "document.tracking.current_release_date"}]}