{"metadata": {"vulnerability": "CVE-2021-22053", "count": 48, "kinds": {"milestone": 4, "sighting": 22, "kev": 11, "other": 11}}, "data": [{"timestamp": "2021-01-04T00:00:00Z", "date_only": false, "value": "2021-01-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-22053", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-11-19T15:56:11Z", "date_only": false, "value": "2021-11-19T15:56:11.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-22053", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-11-19T15:56:11Z", "date_only": false, "value": "2021-11-19T15:56:11.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2021-22053", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-11-19T16:15:00Z", "date_only": false, "value": "2021-11-19T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GX3F-HQ7P-8FXV", "record": "GHSA-GX3F-HQ7P-8FXV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-11-19T16:15:00Z", "date_only": false, "value": "2021-11-19T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-22053", "record": "GSD-2021-22053", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-11-19T16:15:07.657Z", "date_only": false, "value": "2021-11-19T16:15:07.657", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22053", "record": "FKIE_CVE-2021-22053", "field": "published"}, {"timestamp": "2021-11-19T18:23:23Z", "date_only": false, "value": "2021-11-19T18:23:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/32701", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "9822c621-3bef-425b-a682-bda577fc846d", "content": "\u203c CVE-2021-22053 \u203c\n\nApplications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request URI path during the resolution of view templates. When a request is made at `/hystrix/monitor;[user-provided data]`, the path elements following `hystrix/monitor` are being evaluated as SpringEL expressions, which can lead to code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/32701"}, {"timestamp": "2021-11-22T09:30:27Z", "date_only": false, "value": "2021-11-22T09:30:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacker_trick/464", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "2d9d16e6-913a-4067-a3a9-dd2445d5434a", "content": "Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053\nhttps://github.com/SecCoder-Security-Lab/spring-cloud-netflix-hystrix-dashboard-cve-2021-22053\n\nBypass CVE-2021-41379 patch in Windows 11 and Server 2022 with November 2021\nhttps://github.com/klinix5/InstallerFileTakeOver", "url": "https://t.me/hacker_trick/464"}, {"timestamp": "2021-11-22T10:37:29Z", "date_only": false, "value": "2021-11-22T10:37:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1205", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "6dee56f9-f322-46ba-ba95-910a65e8022d", "content": "#exploit\n1. CVE-2021-42321:\nExchange Post-Auth RCE\nhttps://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398\n\n2. CVE-2021-22053:\nSpring Cloud Netflix Hystrix Dashboard\ntemplate resolution vulnerability\nhttps://github.com/SecCoder-Security-Lab/spring-cloud-netflix-hystrix-dashboard-cve-2021-22053\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1205"}, {"timestamp": "2021-11-22T11:01:01Z", "date_only": false, "value": "2021-11-22T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4809", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "f84cb984-cc47-4d27-9ee4-bd11453b9139", "content": "#exploit\n1. CVE-2021-42321:\nExchange Post-Auth RCE\nhttps://gist.github.com/testanull/0188c1ae847f37a70fe536123d14f398\n\n2. CVE-2021-22053:\nSpring Cloud Netflix Hystrix Dashboard\ntemplate resolution vulnerability\nhttps://github.com/SecCoder-Security-Lab/spring-cloud-netflix-hystrix-dashboard-cve-2021-22053", "url": "https://t.me/CyberSecurityTechnologies/4809"}, {"timestamp": "2021-11-22T19:53:38Z", "date_only": false, "value": "2021-11-22T19:53:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GX3F-HQ7P-8FXV", "record": "GHSA-GX3F-HQ7P-8FXV", "field": "modified"}, {"timestamp": "2021-11-23T00:00:00Z", "date_only": true, "value": "2021-11-23", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-22053", "record": "GSD-2021-22053", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-11-23T00:00:00Z", "date_only": true, "value": "2021-11-23", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-22053", "record": "GSD-2021-22053", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-11-23T17:53:33Z", "date_only": false, "value": "2021-11-23T17:53:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GX3F-HQ7P-8FXV", "record": "GHSA-GX3F-HQ7P-8FXV", "field": "published"}, {"timestamp": "2021-11-23T18:06:00Z", "date_only": false, "value": "2021-11-23T18:06Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-22053", "record": "GSD-2021-22053", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-14T14:56:49Z", "date_only": false, "value": "2023-10-14T14:56:49+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-22053", "field": "timestamps.asserted_at", "uuid": "6f51c4f0-0d01-4e79-b198-7e88eb0c814c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:56:49Z", "date_only": false, "value": "2023-10-14T14:56:49+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-22053", "field": "timestamps.first_seen_at", "uuid": "6f51c4f0-0d01-4e79-b198-7e88eb0c814c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:23:24.603Z", "date_only": false, "value": "2023-12-13T01:23:24.603581Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-22053", "record": "GSD-2021-22053", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T18:30:23.933Z", "date_only": false, "value": "2024-08-03T18:30:23.933Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-22053", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T18:30:23.933Z", "date_only": false, "value": "2024-08-03T18:30:23.933Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-22053", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-01)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "6a8081b9-9207-43b3-8392-a883767af4b4"}, {"timestamp": "2025-06-29T00:00:00Z", "date_only": false, "value": "2025-06-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "b031829c-73a7-4342-9917-3aa2fb7a1094"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "987d99f3-f4a4-4ba6-9faa-50d15e9066a1"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-22053", "field": "timestamps.asserted_at", "uuid": "9b4abf57-60e3-4043-96c6-2cd0fe8730ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-22053", "field": "evidence.0.details.added_date", "uuid": "9b4abf57-60e3-4043-96c6-2cd0fe8730ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-21)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "9be195f1-f7fe-4cdb-a77e-5e67ac5c9f67"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-22053", "field": "timestamps.first_seen_at", "uuid": "9b4abf57-60e3-4043-96c6-2cd0fe8730ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-22053", "field": "status.status_updated_at", "uuid": "9b4abf57-60e3-4043-96c6-2cd0fe8730ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-11-20T00:00:00Z", "date_only": false, "value": "2025-11-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-20)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "79897a46-d016-4006-b17f-5eb1da3494ff"}, {"timestamp": "2026-05-17T00:00:00Z", "date_only": false, "value": "2026-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-17)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "859a2b81-c46d-4699-9a85-cb2d8c1dcfd0"}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "87e24ed5-18c6-414b-b0eb-ce177d397398"}, {"timestamp": "2026-06-17T03:36:36.867Z", "date_only": false, "value": "2026-06-17T03:36:36.867", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22053", "record": "FKIE_CVE-2021-22053", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:55.115Z", "date_only": false, "value": "2026-06-19T12:45:55.115538Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bc8e195b-6802-4b08-a52d-f07f2ff641bb", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "b8cf95bd-38fb-4acf-8968-01ad6b22f792", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bc8e195b-6802-4b08-a52d-f07f2ff641bb"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": false, "value": "2026-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "d7ed08f3-a9a2-4c81-951e-dd0b85589d29"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-22053", "field": "timestamps.recorded_at", "uuid": "9b4abf57-60e3-4043-96c6-2cd0fe8730ad", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:04.673Z", "date_only": false, "value": "2026-06-23T11:12:04.673870Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9b4abf57-60e3-4043-96c6-2cd0fe8730ad", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "6ae370fb-0f84-4d74-aa8a-5b763b1e2e83", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9b4abf57-60e3-4043-96c6-2cd0fe8730ad"}, {"timestamp": "2026-06-23T14:03:20.109Z", "date_only": false, "value": "2026-06-23T14:03:20.109358Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7999c870-d901-4efd-aaaa-1b43b26b0f37", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "a7d1e4ae-53d8-40bd-b48f-9d0a5d806578", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7999c870-d901-4efd-aaaa-1b43b26b0f37"}, {"timestamp": "2026-06-30T09:23:06.587Z", "date_only": false, "value": "2026-06-30T09:23:06.587886Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8647471c-4f04-4a83-8bd7-e99eab390cab", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "961e8ed4-67fd-4f3f-9a18-aa9fcb96f2f5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8647471c-4f04-4a83-8bd7-e99eab390cab"}, {"timestamp": "2026-07-01T05:54:17.921Z", "date_only": false, "value": "2026-07-01T05:54:17.921725Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6f51c4f0-0d01-4e79-b198-7e88eb0c814c", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "62c7472b-338f-42bb-a8c6-77673a300797", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6f51c4f0-0d01-4e79-b198-7e88eb0c814c"}, {"timestamp": "2026-07-02T10:00:09.761Z", "date_only": false, "value": "2026-07-02T10:00:09.761746Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-01)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "d90b9b8a-a9fc-4bf7-8db2-57f2b1c8acfc"}, {"timestamp": "2026-07-15T10:00:16.338Z", "date_only": false, "value": "2026-07-15T10:00:16.338757Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-14)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "ac94b080-39d0-4404-a778-92cedf3bc5e5"}, {"timestamp": "2026-07-26T10:00:08.255Z", "date_only": false, "value": "2026-07-26T10:00:08.255143Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-25)", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "5d98f748-f5c0-47e5-a879-4cd886a79cdd"}, {"timestamp": "2026-09-01T17:00:35.017Z", "date_only": false, "value": "2026-09-01T17:00:35.017670Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4861", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "9ad3568e-a125-4b94-9de8-34d8a2fdf698", "url": "https://t.me/cissp/4861"}, {"timestamp": "2026-09-10T14:00:05.680Z", "date_only": false, "value": "2026-09-10T14:00:05.680179Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4861", "record": "CVE-2021-22053", "field": "creation_timestamp", "uuid": "ebab5e81-0b88-4349-991e-f5cc690343c4", "url": "https://t.me/cissp/4861"}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-22053", "field": "timestamps.last_seen_at", "uuid": "6f51c4f0-0d01-4e79-b198-7e88eb0c814c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": true, "value": "2026-10-22", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-22053", "field": "evidence.0.details.observation_date", "uuid": "6f51c4f0-0d01-4e79-b198-7e88eb0c814c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-22T00:00:00Z", "date_only": false, "value": "2026-10-22T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-22053", "field": "status.status_updated_at", "uuid": "6f51c4f0-0d01-4e79-b198-7e88eb0c814c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-24T01:00:01Z", "date_only": false, "value": "2026-10-24T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-22053", "field": "timestamps.recorded_at", "uuid": "6f51c4f0-0d01-4e79-b198-7e88eb0c814c", "status": {"status_reason": "confirmed", "exploited": true}}]}