{"metadata": {"vulnerability": "CVE-2020-29456", "count": 20, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 14}}, "data": [{"timestamp": "2020-12-02T00:00:00Z", "date_only": true, "value": "2020-12-02", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-29456", "record": "GSD-2020-29456", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2020-12-02T00:00:00Z", "date_only": true, "value": "2020-12-02", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-29456", "record": "GSD-2020-29456", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-12-02T00:00:00Z", "date_only": false, "value": "2020-12-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-29456", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-02T07:50:23Z", "date_only": false, "value": "2020-12-02T07:50:23.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-29456", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-02T07:50:23Z", "date_only": false, "value": "2020-12-02T07:50:23.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-29456", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-02T08:15:00Z", "date_only": false, "value": "2020-12-02T08:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9W49-M7XH-5R39", "record": "GHSA-9W49-M7XH-5R39", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-12-02T08:15:00Z", "date_only": false, "value": "2020-12-02T08:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2020-74", "record": "PYSEC-2020-74", "field": "published"}, {"timestamp": "2020-12-02T08:15:00Z", "date_only": false, "value": "2020-12-02T08:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-29456", "record": "GSD-2020-29456", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-02T08:15:10.620Z", "date_only": false, "value": "2020-12-02T08:15:10.620", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-29456", "record": "FKIE_CVE-2020-29456", "field": "published"}, {"timestamp": "2020-12-02T12:54:49Z", "date_only": false, "value": "2020-12-02T12:54:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/17018", "record": "CVE-2020-29456", "field": "creation_timestamp", "uuid": "4dc28b67-d0c7-429c-bbde-71f07faa4282", "content": "\u203c CVE-2020-29456 \u203c\n\nMultiple cross-site scripting (XSS) vulnerabilities in Papermerge before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the rename, tag, upload, or create folder function. The payload can be in a folder, a tag, or a document's filename. If email consumption is configured in Papermerge, a malicious document can be sent by email and is automatically uploaded into the Papermerge web application. Therefore, no authentication is required to exploit XSS if email consumption is configured. Otherwise authentication is required.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/17018"}, {"timestamp": "2020-12-02T16:29:00Z", "date_only": false, "value": "2020-12-02T16:29Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-29456", "record": "GSD-2020-29456", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2020-12-02T16:29:00Z", "date_only": false, "value": "2020-12-02T16:29:00Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2020-74", "record": "PYSEC-2020-74", "field": "modified"}, {"timestamp": "2020-12-03T00:00:00Z", "date_only": true, "value": "2020-12-03", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-68861", "record": "CNVD-2020-68861", "field": "submitTime"}, {"timestamp": "2020-12-04T00:00:00Z", "date_only": true, "value": "2020-12-04", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-68861", "record": "CNVD-2020-68861", "field": "openTime"}, {"timestamp": "2021-04-20T16:37:56Z", "date_only": false, "value": "2021-04-20T16:37:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9W49-M7XH-5R39", "record": "GHSA-9W49-M7XH-5R39", "field": "published"}, {"timestamp": "2023-12-13T01:22:11.747Z", "date_only": false, "value": "2023-12-13T01:22:11.747852Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-29456", "record": "GSD-2020-29456", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T16:55:10.636Z", "date_only": false, "value": "2024-08-04T16:55:10.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-29456", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T16:55:10.636Z", "date_only": false, "value": "2024-08-04T16:55:10.636Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-29456", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-09T20:17:44Z", "date_only": false, "value": "2024-10-09T20:17:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9W49-M7XH-5R39", "record": "GHSA-9W49-M7XH-5R39", "field": "modified"}, {"timestamp": "2026-06-17T03:11:18.430Z", "date_only": false, "value": "2026-06-17T03:11:18.430", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-29456", "record": "FKIE_CVE-2020-29456", "field": "lastModified"}]}