{"vulnerability": "cve-2014-4671", "sightings": [{"uuid": "22a6f713-c63b-4d3c-8911-ebe77fbbcff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4671", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "ab330cb5-cf4a-464a-8c89-0359ed6200de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4671", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:29.000000Z"}, {"uuid": "4df5dead-ec5b-4a38-b2e4-068b552f2a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4671", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/flash_rosetta_jsonp_url_disclosure.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "df972e56-abac-4643-b537-9012c019c922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4671", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:20.000000Z"}, {"uuid": "4a3fa700-99f0-4d12-83a5-dd70668f9ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-4671", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/flash_rosetta_jsonp_url_disclosure.rb", "content": "{\"actions\": [{\"description\": \"Serve exploit via web server\", \"name\": \"WebServer\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Michele Spagnuolo\", \"joev \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"A website that serves a JSONP endpoint that accepts a custom alphanumeric\\n          callback of 1200 chars can be abused to serve an encoded swf payload that\\n          steals the contents of a same-domain URL. Flash < 14.0.0.145 is required.\\n\\n          This module spins up a web server that, upon navigation from a user, attempts\\n          to abuse the specified JSONP endpoint URLs by stealing the response from\\n          GET requests to STEAL_URLS.\", \"disclosure_date\": \"2014-07-08\", \"fullname\": \"auxiliary/gather/flash_rosetta_jsonp_url_disclosure\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"Flash \\\"Rosetta\\\" JSONP GET/POST Response Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/gather/flash_rosetta_jsonp_url_disclosure.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/flash_rosetta_jsonp_url_disclosure\", \"references\": [\"CVE-2014-4671\", \"URL-http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/\", \"URL-https://github.com/mikispag/rosettaflash\", \"URL-https://www.quaxio.com/jsonp_handcrafted_flash_files/\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:14.137985Z"}]}