{"metadata": {"vulnerability": "CVE-2020-26870", "count": 31, "kinds": {"milestone": 8, "sighting": 3, "kev": 0, "other": 20}}, "data": [{"timestamp": "2020-10-07T00:00:00Z", "date_only": true, "value": "2020-10-07", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-26870", "record": "GSD-2020-26870", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-10-07T00:00:00Z", "date_only": false, "value": "2020-10-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-26870", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-10-07T15:50:09Z", "date_only": false, "value": "2020-10-07T15:50:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-26870", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-10-07T16:15:00Z", "date_only": false, "value": "2020-10-07T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-63Q7-H895-M982", "record": "GHSA-63Q7-H895-M982", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-10-07T16:15:00Z", "date_only": false, "value": "2020-10-07T16:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-26870", "record": "UBUNTU-CVE-2020-26870", "field": "published"}, {"timestamp": "2020-10-07T16:15:00Z", "date_only": false, "value": "2020-10-07T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-26870", "record": "GSD-2020-26870", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-10-07T16:15:18.030Z", "date_only": false, "value": "2020-10-07T16:15:18.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26870", "record": "FKIE_CVE-2020-26870", "field": "published"}, {"timestamp": "2020-10-07T20:29:20Z", "date_only": false, "value": "2020-10-07T20:29:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/15118", "record": "CVE-2020-26870", "field": "creation_timestamp", "uuid": "e1a4d73c-e9f8-4049-9de9-8f0e3c5a6b94", "content": "\u203c CVE-2020-26870 \u203c\n\nCure53 DOMPurify before 2.0.17 allows mutation XSS. This occurs because a serialize-parse roundtrip does not necessarily return the original DOM tree, and a namespace can change from HTML to MathML, as demonstrated by nesting of FORM elements.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/15118"}, {"timestamp": "2020-10-16T12:42:03Z", "date_only": false, "value": "2020-10-16T12:42:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/15311", "record": "CVE-2020-26870", "field": "creation_timestamp", "uuid": "c5b65610-c003-41ec-9a72-caa1e25f5e16", "content": "\u203c CVE-2020-27176 \u203c\n\nMutation XSS exists in Mark Text through 0.16.2 that leads to Remote Code Execution. NOTE: this might be considered a duplicate of CVE-2020-26870; however, it can also be considered an issue in the design of the \"source code mode\" feature, which parses HTML even though HTML support is not one of the primary advertised roles of the product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/15311"}, {"timestamp": "2020-12-18T22:51:40Z", "date_only": false, "value": "2020-12-18T22:51:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-63Q7-H895-M982", "record": "GHSA-63Q7-H895-M982", "field": "published"}, {"timestamp": "2021-01-13T00:00:00Z", "date_only": false, "value": "2021-01-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-029", "record": "CERTFR-2021-AVI-029", "field": "last_revision_date"}, {"timestamp": "2021-01-13T00:00:00Z", "date_only": false, "value": "2021-01-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-029", "record": "CERTFR-2021-AVI-029", "field": "initial_release_date"}, {"timestamp": "2021-01-13T00:00:00Z", "date_only": false, "value": "2021-01-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-029", "record": "CERTFR-2021-AVI-029", "field": "revisions.0.revision_date"}, {"timestamp": "2021-07-20T00:00:00Z", "date_only": true, "value": "2021-07-20", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-26870", "record": "GSD-2020-26870", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-07-20T22:54:41Z", "date_only": false, "value": "2021-07-20T22:54:41.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-26870", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-07-21T00:00:00Z", "date_only": false, "value": "2021-07-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-556", "record": "CERTFR-2021-AVI-556", "field": "last_revision_date"}, {"timestamp": "2021-07-21T00:00:00Z", "date_only": false, "value": "2021-07-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-556", "record": "CERTFR-2021-AVI-556", "field": "initial_release_date"}, {"timestamp": "2021-07-21T00:00:00Z", "date_only": false, "value": "2021-07-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-556", "record": "CERTFR-2021-AVI-556", "field": "revisions.0.revision_date"}, {"timestamp": "2022-04-27T18:49:00Z", "date_only": false, "value": "2022-04-27T18:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-26870", "record": "GSD-2020-26870", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-04-28T17:58:51Z", "date_only": false, "value": "2022-04-28T17:58:51Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-63Q7-H895-M982", "record": "GHSA-63Q7-H895-M982", "field": "modified"}, {"timestamp": "2023-12-13T01:22:09.004Z", "date_only": false, "value": "2023-12-13T01:22:09.004721Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-26870", "record": "GSD-2020-26870", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0117", "record": "WID-SEC-W-2024-0117", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0117", "record": "WID-SEC-W-2024-0117", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0117", "record": "WID-SEC-W-2024-0117", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-01-16T23:00:00Z", "date_only": false, "value": "2024-01-16T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0117", "record": "WID-SEC-W-2024-0117", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-02-10T09:41:20Z", "date_only": false, "value": "2024-02-10T09:41:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/182501", "record": "CVE-2020-26870", "field": "creation_timestamp", "uuid": "061482d3-fb82-48a6-b2b4-39fc55fffd64", "content": "https://ift.tt/7iGjCeY\nCVE-2020-26870 | Oracle Retail Customer Management and Segmentation Foundation Internal Operations cross site scripting", "url": "https://t.me/ctinow/182501"}, {"timestamp": "2024-08-04T16:03:22.865Z", "date_only": false, "value": "2024-08-04T16:03:22.865Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-26870", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T16:03:22.865Z", "date_only": false, "value": "2024-08-04T16:03:22.865Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-26870", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:03:46.978Z", "date_only": false, "value": "2024-08-15T18:03:46.978+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0117", "record": "WID-SEC-W-2024-0117", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-24T04:48:49Z", "date_only": false, "value": "2025-10-24T04:48:49Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-26870", "record": "UBUNTU-CVE-2020-26870", "field": "modified"}, {"timestamp": "2026-06-17T03:08:26.847Z", "date_only": false, "value": "2026-06-17T03:08:26.847", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26870", "record": "FKIE_CVE-2020-26870", "field": "lastModified"}]}