{"metadata": {"vulnerability": "CVE-2021-21402", "count": 39, "kinds": {"milestone": 3, "sighting": 18, "kev": 11, "other": 7}}, "data": [{"timestamp": "2020-12-22T00:00:00Z", "date_only": false, "value": "2020-12-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-21402", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-03-23T19:35:12Z", "date_only": false, "value": "2021-03-23T19:35:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2021-21402", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-03-23T19:35:13Z", "date_only": false, "value": "2021-03-23T19:35:13.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-21402", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-03-23T20:15:00Z", "date_only": false, "value": "2021-03-23T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-21402", "record": "GSD-2021-21402", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-03-23T20:15:13.120Z", "date_only": false, "value": "2021-03-23T20:15:13.120", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-21402", "record": "FKIE_CVE-2021-21402", "field": "published"}, {"timestamp": "2021-03-23T23:38:33Z", "date_only": false, "value": "2021-03-23T23:38:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/25345", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "4eb01d60-b0ec-4beb-aee5-6b72c36bc591", "content": "\u203c CVE-2021-21402 \u203c\n\nJellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public Internet are potentially at risk. This is fixed in version 10.7.1. As a workaround, users may be able to restrict some access by enforcing strict security permissions on their filesystem, however, it is recommended to update as soon as possible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/25345"}, {"timestamp": "2021-03-27T02:16:00Z", "date_only": false, "value": "2021-03-27T02:16Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-21402", "record": "GSD-2021-21402", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-04-06T11:01:13Z", "date_only": false, "value": "2021-04-06T11:01:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/3064", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "6cc79714-6c32-4402-bfd0-50cba76d39ad", "content": "CVE-2021-21402:\nUnauthenticated abritrary file read in\nJellyfin Free Software Media System (PoC)\nhttps://securitylab.github.com/advisories/GHSL-2021-050-jellyfin", "url": "https://t.me/CyberSecurityTechnologies/3064"}, {"timestamp": "2021-04-12T11:01:12Z", "date_only": false, "value": "2021-04-12T11:01:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/3104", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "8b7c7b47-dd58-4d8e-986a-c421dbcd0b16", "content": "#Analytics\n10 most exploited vulnerabilities of the week (April 5-11)\nCVE-2021-26855 - ProxyLogon MS Exchange Srv RCE\nhttps://t.me/cybersecuritytechnologies/2835\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\nhttps://t.me/cybersecuritytechnologies/1515\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\nCVE-2021-26411 - IE mshtml UAF\nhttps://t.me/cybersecuritytechnologies/2908\nCVE-2021-3129 - Laravel debug RCE\nhttps://t.me/cybersecuritytechnologies/2557\nCVE-2021-26708 - LPE in the Linux kernel <5.10.x\nhttps://github.com/jordan9001/vsock_poc\nCVE-2020-16040 - V8 JIT Compiler Bug\nhttps://t.me/cybersecuritytechnologies/2450\nCVE-2021-21982 - SSRF in VMWare\nhttps://t.me/cybersecuritytechnologies/3039\nCVE-2021-21402 - UAF read in Jellyfin\nhttps://t.me/cybersecuritytechnologies/3064\nCVE-2021-29154 - BPF JIT bug\nhttps://www.openwall.com/lists/oss-security/2021/04/08/1", "url": "https://t.me/CyberSecurityTechnologies/3104"}, {"timestamp": "2021-09-21T06:42:52Z", "date_only": false, "value": "2021-09-21T06:42:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pwnwiki_zhchannel/87", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "ecdf47d9-0775-44ce-9345-32e35265c2b2", "content": "CVE-2021-21402 Jellyfin \u4efb\u610f\u6587\u4ef6\u8b80\u53d6\u6f0f\u6d1e\nhttps://short.pwnwiki.org/?c=bxsB6w", "url": "https://t.me/pwnwiki_zhchannel/87"}, {"timestamp": "2023-10-17T22:27:40Z", "date_only": false, "value": "2023-10-17T22:27:40+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-21402", "field": "timestamps.asserted_at", "uuid": "fcbf12dc-9ee2-4a67-a133-50786fa1e696", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-17T22:27:40Z", "date_only": false, "value": "2023-10-17T22:27:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-21402", "field": "timestamps.first_seen_at", "uuid": "fcbf12dc-9ee2-4a67-a133-50786fa1e696", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:23:11.264Z", "date_only": false, "value": "2023-12-13T01:23:11.264752Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-21402", "record": "GSD-2021-21402", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T18:09:16.077Z", "date_only": false, "value": "2024-08-03T18:09:16.077Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-21402", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T18:09:16.077Z", "date_only": false, "value": "2024-08-03T18:09:16.077Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-21402", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-08)", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "2cdd3c9f-9618-4666-a7e2-1da7e3392fcc"}, {"timestamp": "2025-05-08T00:00:00Z", "date_only": false, "value": "2025-05-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-08)", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "bf7787c4-a1b8-4e7e-bf32-ca2449d899ec"}, {"timestamp": "2025-05-09T00:00:00Z", "date_only": false, "value": "2025-05-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-09)", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "bc166534-8246-4416-be9e-b178ec8f92cc"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-21402", "field": "timestamps.asserted_at", "uuid": "301eb79d-6149-49c1-9170-6debc9b5e91c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-21402", "field": "evidence.0.details.added_date", "uuid": "301eb79d-6149-49c1-9170-6debc9b5e91c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "123e0cb0-8523-4a81-a7ff-3c2c894a9968"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-21402", "field": "timestamps.first_seen_at", "uuid": "301eb79d-6149-49c1-9170-6debc9b5e91c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-21402", "field": "status.status_updated_at", "uuid": "301eb79d-6149-49c1-9170-6debc9b5e91c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-26)", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "36559938-57d5-4352-b44b-818b4e4faf99"}, {"timestamp": "2026-03-26T00:00:00Z", "date_only": false, "value": "2026-03-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-03-26)", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "44123915-ba25-4010-8083-801719a034e6"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "df2dc8d1-3a85-46f4-a62c-1307a9b57ba5"}, {"timestamp": "2026-06-17T03:35:29.773Z", "date_only": false, "value": "2026-06-17T03:35:29.773", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-21402", "record": "FKIE_CVE-2021-21402", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:59.008Z", "date_only": false, "value": "2026-06-19T12:45:59.008267Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59b8ef5d-9d97-4be7-a0ef-f8273e32828e", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "292f8af7-dd40-468c-ab25-89f5f9cad827", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/59b8ef5d-9d97-4be7-a0ef-f8273e32828e"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-21402", "field": "timestamps.recorded_at", "uuid": "301eb79d-6149-49c1-9170-6debc9b5e91c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:07.414Z", "date_only": false, "value": "2026-06-23T11:12:07.414348Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/301eb79d-6149-49c1-9170-6debc9b5e91c", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "e6f14e81-b571-436b-a35b-f3134e57d4b3", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/301eb79d-6149-49c1-9170-6debc9b5e91c"}, {"timestamp": "2026-06-23T14:03:22.791Z", "date_only": false, "value": "2026-06-23T14:03:22.791416Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6dcbb28e-0f39-4bc8-a081-6a4564dc7c60", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "29cf3758-6452-4c0c-a27b-9c49e97a172b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6dcbb28e-0f39-4bc8-a081-6a4564dc7c60"}, {"timestamp": "2026-06-30T09:23:58.360Z", "date_only": false, "value": "2026-06-30T09:23:58.360233Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/50859dce-754c-43d7-bd68-16d9f4768a38", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "0a7e3983-ed1a-4f3a-a806-f51023a4c5c9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/50859dce-754c-43d7-bd68-16d9f4768a38"}, {"timestamp": "2026-07-01T05:53:57.858Z", "date_only": false, "value": "2026-07-01T05:53:57.858570Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fcbf12dc-9ee2-4a67-a133-50786fa1e696", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "b9b4de6d-911f-4912-97df-f6b8bf0d2eed", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/fcbf12dc-9ee2-4a67-a133-50786fa1e696"}, {"timestamp": "2026-09-01T17:00:55.473Z", "date_only": false, "value": "2026-09-01T17:00:55.473800Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/2886", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "434e6934-c877-4ce2-98fd-1e232ee296c3", "url": "https://t.me/cissp/2886"}, {"timestamp": "2026-09-11T11:00:04.197Z", "date_only": false, "value": "2026-09-11T11:00:04.197750Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/2886", "record": "CVE-2021-21402", "field": "creation_timestamp", "uuid": "868928ca-e9a1-49c2-b10c-55da53c3f684", "url": "https://t.me/cissp/2886"}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-21402", "field": "timestamps.last_seen_at", "uuid": "fcbf12dc-9ee2-4a67-a133-50786fa1e696", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": true, "value": "2026-10-12", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-21402", "field": "evidence.0.details.observation_date", "uuid": "fcbf12dc-9ee2-4a67-a133-50786fa1e696", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-21402", "field": "status.status_updated_at", "uuid": "fcbf12dc-9ee2-4a67-a133-50786fa1e696", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:03:44Z", "date_only": false, "value": "2026-10-21T09:03:44+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-21402", "field": "timestamps.recorded_at", "uuid": "fcbf12dc-9ee2-4a67-a133-50786fa1e696", "status": {"status_reason": "confirmed", "exploited": true}}]}