{"vulnerability": "cve-2022-3023", "sightings": [{"uuid": "5d3e3bb2-f1cc-4393-9862-5af9d4892c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3023", "type": "seen", "source": "https://t.me/cibsecurity/52557", "content": "\u203c CVE-2022-3023 \u203c\n\nUse of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-04T15:28:00.000000Z"}, {"uuid": "870fcf2f-195d-4e6c-a6d6-5c3dcc0639fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3023", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14486", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3023\n\ud83d\udd25 CVSS Score: 4.2 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.\n\ud83d\udccf Published: 2022-11-04T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T13:49:49.115Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/120f1346-e958-49d0-b66c-0f889a469540\n2. https://github.com/pingcap/tidb/commit/d0376379d615cc8f263a0b17c031ce403c8dcbfb", "creation_timestamp": "2025-05-02T14:15:52.000000Z"}, {"uuid": "75450508-be4b-420f-85b4-03b130634b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-30239", "type": "seen", "source": "https://t.me/cibsecurity/42203", "content": "\u203c CVE-2022-30239 \u203c\n\nAn argument injection vulnerability in the browser-based authentication component of the Magnitude Simba Amazon Athena JDBC Driver 2.0.25 through 2.0.28 may allow a local user to execute code. NOTE: this is different from CVE-2022-29971.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-09T22:33:05.000000Z"}]}