{"metadata": {"vulnerability": "CVE-2020-27348", "count": 27, "kinds": {"milestone": 6, "sighting": 5, "kev": 0, "other": 16}}, "data": [{"timestamp": "2020-10-20T00:00:00Z", "date_only": false, "value": "2020-10-20T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-27348", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-03T00:00:00Z", "date_only": false, "value": "2020-12-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / canonical", "record": "CVE-2020-27348", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-03T18:16:00Z", "date_only": false, "value": "2020-12-03T18:16:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / canonical", "record": "CVE-2020-27348", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2020-12-03T18:16:00Z", "date_only": false, "value": "2020-12-03T18:16:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2020-27348", "record": "GSD-2020-27348", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC", "linked_record": true}, {"timestamp": "2020-12-03T18:16:00Z", "date_only": false, "value": "2020-12-03T18:16:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-27348", "record": "UBUNTU-CVE-2020-27348", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-12-04T00:00:00Z", "date_only": true, "value": "2020-12-04", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-27348", "record": "GSD-2020-27348", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2020-12-04T02:30:36Z", "date_only": false, "value": "2020-12-04T02:30:36.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / canonical", "record": "CVE-2020-27348", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-04T02:30:36.159Z", "date_only": false, "value": "2020-12-04T02:30:36.159Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-27348", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2020-12-04T03:15:00Z", "date_only": false, "value": "2020-12-04T03:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QXM5-VX5J-PP6W", "record": "GHSA-QXM5-VX5J-PP6W", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2020-12-04T03:15:00Z", "date_only": false, "value": "2020-12-04T03:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2020-109", "record": "PYSEC-2020-109", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-12-04T03:15:00Z", "date_only": false, "value": "2020-12-04T03:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-27348", "record": "GSD-2020-27348", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2020-12-04T03:15:12.413Z", "date_only": false, "value": "2020-12-04T03:15:12.413", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-27348", "record": "FKIE_CVE-2020-27348", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2020-12-04T07:26:42Z", "date_only": false, "value": "2020-12-04T07:26:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/17140", "record": "CVE-2020-27348", "field": "creation_timestamp", "uuid": "57536c88-1e4b-4fbb-a779-544cfda1ecdb", "content": "\u203c CVE-2020-27348 \u203c\n\nIn some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/17140"}, {"timestamp": "2020-12-14T00:00:00Z", "date_only": true, "value": "2020-12-14", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-27348", "record": "GSD-2020-27348", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2020-12-14T20:36:00Z", "date_only": false, "value": "2020-12-14T20:36Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-27348", "record": "GSD-2020-27348", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2020-12-14T20:36:00Z", "date_only": false, "value": "2020-12-14T20:36:00Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2020-109", "record": "PYSEC-2020-109", "field": "modified", "linked_record": true}, {"timestamp": "2022-05-24T17:35:23Z", "date_only": false, "value": "2022-05-24T17:35:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QXM5-VX5J-PP6W", "record": "GHSA-QXM5-VX5J-PP6W", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-12-13T01:22:11.359Z", "date_only": false, "value": "2023-12-13T01:22:11.359317Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-27348", "record": "GSD-2020-27348", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-04-23T19:19:00Z", "date_only": false, "value": "2024-04-23T19:19:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4767", "record": "CVE-2020-27348", "field": "creation_timestamp", "uuid": "ef66fb24-f72d-46ad-943a-f84789b482fe", "content": "#ExploitObserverAlert\n\nCVE-2020-27348\n\nDESCRIPTION: Exploit Observer has 9 entries in 4 file formats related to CVE-2020-27348. In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain code execution within the context of another snap if both plug the home interface or similar. This issue affects snapcraft versions prior to 4.4.4, prior to 2.43.1+16.04.1, and prior to 2.43.1+18.04.1.\n\nFIRST-EPSS: 0.000900000\nNVD-IS: 5.5\nNVD-ES: 1.3\nARPS-PRIORITY: 0.7040618", "url": "https://t.me/arpsyndicate/4767"}, {"timestamp": "2024-08-04T16:11:36.588Z", "date_only": false, "value": "2024-08-04T16:11:36.588Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-27348", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T17:14:15.768Z", "date_only": false, "value": "2024-09-16T17:14:15.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-27348", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-23T18:48:17Z", "date_only": false, "value": "2024-10-23T18:48:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QXM5-VX5J-PP6W", "record": "GHSA-QXM5-VX5J-PP6W", "field": "modified", "linked_record": true}, {"timestamp": "2025-07-16T04:56:13Z", "date_only": false, "value": "2025-07-16T04:56:13Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2020-27348", "record": "UBUNTU-CVE-2020-27348", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T03:09:09.500Z", "date_only": false, "value": "2026-06-17T03:09:09.500", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-27348", "record": "FKIE_CVE-2020-27348", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-04T12:00:07.683Z", "date_only": false, "value": "2026-08-04T12:00:07.683233Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/fuzzinglabs/261", "record": "CVE-2020-27348", "field": "creation_timestamp", "uuid": "7a9d4064-2385-482c-9fde-7da8c0be314b", "url": "https://t.me/fuzzinglabs/261"}, {"timestamp": "2026-08-05T00:00:42.603Z", "date_only": false, "value": "2026-08-05T00:00:42.603093Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/fuzzinglabs/261", "record": "CVE-2020-27348", "field": "creation_timestamp", "uuid": "ed67ef08-3b5d-4d96-b16a-bf5753da484a", "url": "https://t.me/fuzzinglabs/261"}, {"timestamp": "2026-08-06T00:00:37.680Z", "date_only": false, "value": "2026-08-06T00:00:37.680968Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/fuzzinglabs/261", "record": "CVE-2020-27348", "field": "creation_timestamp", "uuid": "beaa1649-fd75-417c-a43a-59132fbbf0b3", "url": "https://t.me/fuzzinglabs/261", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-08T16:26:26.761Z", "anchors": {"origin": {"timestamp": "2020-12-03T00:00:00Z", "date_only": false, "value": "2020-12-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / canonical", "record": "CVE-2020-27348", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2020-12-03T00:00:00Z", "date_only": false, "value": "2020-12-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / canonical", "record": "CVE-2020-27348", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-06T00:00:37.680Z", "date_only": false, "value": "2026-08-06T00:00:37.680968Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/fuzzinglabs/261", "record": "CVE-2020-27348", "field": "creation_timestamp", "uuid": "beaa1649-fd75-417c-a43a-59132fbbf0b3", "url": "https://t.me/fuzzinglabs/261", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 179020837.68, "hours": 49728.01046666667, "days": 2072.0004361111114, "min_seconds": 178934437.68, "max_seconds": 179020837.68, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-12-03T00:00:00Z", "date_only": false, "value": "2020-12-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / canonical", "record": "CVE-2020-27348", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-06T00:00:37.680Z", "date_only": false, "value": "2026-08-06T00:00:37.680968Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/fuzzinglabs/261", "record": "CVE-2020-27348", "field": "creation_timestamp", "uuid": "beaa1649-fd75-417c-a43a-59132fbbf0b3", "url": "https://t.me/fuzzinglabs/261", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 187201586.761881, "hours": 52000.44076718917, "days": 2166.6850319662153, "min_seconds": 187115186.761881, "max_seconds": 187201586.761881, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2020-12-03T00:00:00Z", "date_only": false, "value": "2020-12-03T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / canonical", "record": "CVE-2020-27348", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T16:26:26.761Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 8180749.081881, "hours": 2272.4303005225, "days": 94.68459585510416, "min_seconds": 8180749.081881, "max_seconds": 8180749.081881, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-06T00:00:37.680Z", "date_only": false, "value": "2026-08-06T00:00:37.680968Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/fuzzinglabs/261", "record": "CVE-2020-27348", "field": "creation_timestamp", "uuid": "beaa1649-fd75-417c-a43a-59132fbbf0b3", "url": "https://t.me/fuzzinglabs/261", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T16:26:26.761Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}