{"metadata": {"vulnerability": "CVE-2021-22969", "count": 18, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 13}}, "data": [{"timestamp": "2021-01-06T00:00:00Z", "date_only": false, "value": "2021-01-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-22969", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-11-19T18:08:30Z", "date_only": false, "value": "2021-11-19T18:08:30.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-22969", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-11-19T18:08:30Z", "date_only": false, "value": "2021-11-19T18:08:30.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "CVE-2021-22969", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-11-19T19:15:00Z", "date_only": false, "value": "2021-11-19T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MCXR-FX5F-96QQ", "record": "GHSA-MCXR-FX5F-96QQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-11-19T19:15:00Z", "date_only": false, "value": "2021-11-19T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-22969", "record": "GSD-2021-22969", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-11-19T19:15:08.507Z", "date_only": false, "value": "2021-11-19T19:15:08.507", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22969", "record": "FKIE_CVE-2021-22969", "field": "published"}, {"timestamp": "2021-11-19T22:17:06Z", "date_only": false, "value": "2021-11-19T22:17:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/32734", "record": "CVE-2021-22969", "field": "creation_timestamp", "uuid": "95986905-9c30-4065-ad3f-a89bd598e141", "content": "\u203c CVE-2021-22969 \u203c\n\nConcrete CMS (formerly concrete5) versions below 8.5.7 has a SSRF mitigation bypass using DNS Rebind attack giving an attacker the ability to fetch cloud IAAS (ex AWS) IAM keys.To fix this Concrete CMS no longer allows downloads from the local network and specifies the validated IP when downloading rather than relying on DNS.Discoverer: Adrian Tiron from FORTBRIDGE ( https://www.fortbridge.co.uk/ )The Concrete CMS team gave this a CVSS 3.1 score of 3.5 AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N . Please note that Cloud IAAS provider mis-configurations are not Concrete CMS vulnerabilities. A mitigation for this vulnerability is to make sure that the IMDS configurations are according to a cloud provider's best practices.This fix is also in Concrete version 9.0.0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/32734"}, {"timestamp": "2021-11-22T18:30:27Z", "date_only": false, "value": "2021-11-22T18:30:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MCXR-FX5F-96QQ", "record": "GHSA-MCXR-FX5F-96QQ", "field": "modified"}, {"timestamp": "2021-11-23T00:00:00Z", "date_only": true, "value": "2021-11-23", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-22969", "record": "GSD-2021-22969", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-11-23T00:00:00Z", "date_only": true, "value": "2021-11-23", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-22969", "record": "GSD-2021-22969", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-11-23T00:00:00Z", "date_only": true, "value": "2021-11-23", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-94042", "record": "CNVD-2021-94042", "field": "submitTime"}, {"timestamp": "2021-11-23T13:35:00Z", "date_only": false, "value": "2021-11-23T13:35Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-22969", "record": "GSD-2021-22969", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-11-23T18:18:35Z", "date_only": false, "value": "2021-11-23T18:18:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MCXR-FX5F-96QQ", "record": "GHSA-MCXR-FX5F-96QQ", "field": "published"}, {"timestamp": "2021-12-03T00:00:00Z", "date_only": true, "value": "2021-12-03", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-94042", "record": "CNVD-2021-94042", "field": "openTime"}, {"timestamp": "2023-12-13T01:23:24.508Z", "date_only": false, "value": "2023-12-13T01:23:24.508424Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-22969", "record": "GSD-2021-22969", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T18:58:26.146Z", "date_only": false, "value": "2024-08-03T18:58:26.146Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-22969", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T18:58:26.146Z", "date_only": false, "value": "2024-08-03T18:58:26.146Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-22969", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:38:07.730Z", "date_only": false, "value": "2026-06-17T03:38:07.730", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22969", "record": "FKIE_CVE-2021-22969", "field": "lastModified"}]}