{"metadata": {"vulnerability": "CVE-2021-23394", "count": 27, "kinds": {"milestone": 4, "sighting": 7, "kev": 0, "other": 16}}, "data": [{"timestamp": "2021-01-08T00:00:00Z", "date_only": false, "value": "2021-01-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-23394", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-06-13T00:00:00Z", "date_only": false, "value": "2021-06-13T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / snyk", "record": "CVE-2021-23394", "field": "containers.cna.datePublic"}, {"timestamp": "2021-06-13T00:00:00Z", "date_only": true, "value": "2021-06-13", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-23394", "record": "GSD-2021-23394", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-06-13T11:04:16.217Z", "date_only": false, "value": "2021-06-13T11:04:16.217664Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / snyk", "record": "CVE-2021-23394", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2021-06-13T11:04:16.217Z", "date_only": false, "value": "2021-06-13T11:04:16.217664Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2021-23394", "record": "GSD-2021-23394", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2021-06-13T11:05:11.816Z", "date_only": false, "value": "2021-06-13T11:05:11.816Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-23394", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-06-13T11:15:00Z", "date_only": false, "value": "2021-06-13T11:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QM58-CVVM-C5QR", "record": "GHSA-QM58-CVVM-C5QR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-06-13T11:15:00Z", "date_only": false, "value": "2021-06-13T11:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-23394", "record": "GSD-2021-23394", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-06-13T11:15:14.290Z", "date_only": false, "value": "2021-06-13T11:15:14.290", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-23394", "record": "FKIE_CVE-2021-23394", "field": "published"}, {"timestamp": "2021-06-13T14:22:25Z", "date_only": false, "value": "2021-06-13T14:22:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/25429", "record": "CVE-2021-23394", "field": "creation_timestamp", "uuid": "21f14fd9-85b9-4502-abcd-f2cde5702e11", "content": "\u203c CVE-2021-23394 \u203c\n\nThe package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/25429"}, {"timestamp": "2021-06-15T15:51:02Z", "date_only": false, "value": "2021-06-15T15:51:02Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QM58-CVVM-C5QR", "record": "GHSA-QM58-CVVM-C5QR", "field": "published"}, {"timestamp": "2021-06-17T00:00:00Z", "date_only": true, "value": "2021-06-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-53904", "record": "CNVD-2021-53904", "field": "submitTime"}, {"timestamp": "2021-07-23T00:00:00Z", "date_only": true, "value": "2021-07-23", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-53904", "record": "CNVD-2021-53904", "field": "openTime"}, {"timestamp": "2021-08-23T12:07:01Z", "date_only": false, "value": "2021-08-23T12:07:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/4133", "record": "CVE-2021-23394", "field": "creation_timestamp", "uuid": "18e45b9b-bd87-4dd7-9799-d6363fddce23", "content": "#Threat_Research\n1. CVE-2021-32682, CVE-2021-23394:\nWrite-up of several pre-auth RCEs in elFinder < 2.1.59\nhttps://blog.sonarsource.com/elfinder-case-study-of-web-file-manager-vulnerabilities\n2. CVE-2021-30656:\nApple iOS/iPadOS GPU Drivers information disclosure\nhttps://jsherman212.github.io/CVE-2021-30656", "url": "https://t.me/CyberSecurityTechnologies/4133"}, {"timestamp": "2022-08-02T15:16:55Z", "date_only": false, "value": "2022-08-02T15:16:55.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / snyk", "record": "CVE-2021-23394", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-08-11T00:02:52Z", "date_only": false, "value": "2022-08-11T00:02:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QM58-CVVM-C5QR", "record": "GHSA-QM58-CVVM-C5QR", "field": "modified"}, {"timestamp": "2022-11-09T00:00:00Z", "date_only": true, "value": "2022-11-09", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-23394", "record": "GSD-2021-23394", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-11-09T03:32:00Z", "date_only": false, "value": "2022-11-09T03:32Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-23394", "record": "GSD-2021-23394", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:23:29.673Z", "date_only": false, "value": "2023-12-13T01:23:29.673135Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-23394", "record": "GSD-2021-23394", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T19:05:55.797Z", "date_only": false, "value": "2024-08-03T19:05:55.797Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-23394", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T22:30:47.517Z", "date_only": false, "value": "2024-09-16T22:30:47.517Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-23394", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-30T05:19:32Z", "date_only": false, "value": "2025-11-30T05:19:32.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-23394.yaml", "record": "CVE-2021-23394", "field": "creation_timestamp", "uuid": "5c815330-47e9-422c-a299-cbfc93e24087", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-23394.yaml"}, {"timestamp": "2025-11-30T09:00:06Z", "date_only": false, "value": "2025-11-30T09:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/imkoF_Z47iUYHKUYnUtzZel-X1UwY1CoyK6KAfEEjTDMbLw", "record": "CVE-2021-23394", "field": "creation_timestamp", "uuid": "647e86e3-897e-42c0-911f-8c75513a8763"}, {"timestamp": "2025-12-03T21:02:25.838Z", "date_only": false, "value": "2025-12-03T21:02:25.838770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m74e5qaczr2b", "record": "CVE-2021-23394", "field": "creation_timestamp", "uuid": "2b85bf88-b4d6-4e42-a756-0ba1eba9c954", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m74e5qaczr2b"}, {"timestamp": "2026-06-17T03:38:40.937Z", "date_only": false, "value": "2026-06-17T03:38:40.937", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-23394", "record": "FKIE_CVE-2021-23394", "field": "lastModified"}, {"timestamp": "2026-09-01T17:00:42.138Z", "date_only": false, "value": "2026-09-01T17:00:42.138130Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4103", "record": "CVE-2021-23394", "field": "creation_timestamp", "uuid": "c5ede11a-f8d0-4c3a-a839-98849967d146", "url": "https://t.me/cissp/4103"}, {"timestamp": "2026-09-10T22:00:04.280Z", "date_only": false, "value": "2026-09-10T22:00:04.280106Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4103", "record": "CVE-2021-23394", "field": "creation_timestamp", "uuid": "689375bf-98fc-4e7e-affe-ca7aba7bc006", "url": "https://t.me/cissp/4103"}]}