{"metadata": {"vulnerability": "CVE-2021-26296", "count": 28, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 19}}, "data": [{"timestamp": "2021-01-28T00:00:00Z", "date_only": false, "value": "2021-01-28T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-26296", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-02-19T00:00:00Z", "date_only": true, "value": "2021-02-19", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-26296", "record": "GSD-2021-26296", "field": "namespaces.gitlab.com.advisories.1.pubdate"}, {"timestamp": "2021-02-19T08:30:14Z", "date_only": false, "value": "2021-02-19T08:30:14.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-26296", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-02-19T09:15:00Z", "date_only": false, "value": "2021-02-19T09:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GQ67-PP9W-43GP", "record": "GHSA-GQ67-PP9W-43GP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-02-19T09:15:00Z", "date_only": false, "value": "2021-02-19T09:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-26296", "record": "GSD-2021-26296", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-02-19T09:15:13.283Z", "date_only": false, "value": "2021-02-19T09:15:13.283", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26296", "record": "FKIE_CVE-2021-26296", "field": "published"}, {"timestamp": "2021-02-19T12:51:07Z", "date_only": false, "value": "2021-02-19T12:51:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/23846", "record": "CVE-2021-26296", "field": "creation_timestamp", "uuid": "00dde3d6-cd5e-4835-85d4-2e2855f76e52", "content": "\u203c CVE-2021-26296 \u203c\n\nIn the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery (CSRF) tokens. Due to that limitation, it is possible (although difficult) for an attacker to calculate a future CSRF token value and to use that value to trick a user into executing unwanted actions on an application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/23846"}, {"timestamp": "2021-02-21T00:00:00Z", "date_only": true, "value": "2021-02-21", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-13225", "record": "CNVD-2021-13225", "field": "submitTime"}, {"timestamp": "2021-02-27T00:00:00Z", "date_only": true, "value": "2021-02-27", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-13225", "record": "CNVD-2021-13225", "field": "openTime"}, {"timestamp": "2021-05-07T21:12:38Z", "date_only": false, "value": "2021-05-07T21:12:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GQ67-PP9W-43GP", "record": "GHSA-GQ67-PP9W-43GP", "field": "modified"}, {"timestamp": "2021-05-21T00:00:00Z", "date_only": false, "value": "2021-05-21T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-395", "record": "CERTFR-2021-AVI-395", "field": "last_revision_date"}, {"timestamp": "2021-05-21T00:00:00Z", "date_only": false, "value": "2021-05-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-395", "record": "CERTFR-2021-AVI-395", "field": "initial_release_date"}, {"timestamp": "2021-05-21T00:00:00Z", "date_only": false, "value": "2021-05-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-395", "record": "CERTFR-2021-AVI-395", "field": "revisions.0.revision_date"}, {"timestamp": "2021-05-30T02:49:58Z", "date_only": false, "value": "2021-05-30T02:49:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pwnwiki_zhchannel/537", "record": "CVE-2021-26296", "field": "creation_timestamp", "uuid": "9e883c89-dbad-4fb4-995b-ce06c852c0bc", "content": "CVE-2021-26296 Apache MyFaces 2.x \u8de8\u7ad9\u8acb\u6c42\u507d\u9020\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-26296_Apache_MyFaces_2.x_%E8%B7%A8%E7%AB%99%E8%AB%8B%E6%B1%82%E5%81%BD%E9%80%A0%E6%BC%8F%E6%B4%9E", "url": "https://t.me/pwnwiki_zhchannel/537"}, {"timestamp": "2021-06-02T00:00:00Z", "date_only": true, "value": "2021-06-02", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-26296", "record": "GSD-2021-26296", "field": "namespaces.gitlab.com.advisories.1.date"}, {"timestamp": "2021-06-02T15:15:00Z", "date_only": false, "value": "2021-06-02T15:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-26296", "record": "GSD-2021-26296", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-06-16T00:00:00Z", "date_only": true, "value": "2021-06-16", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-26296", "record": "GSD-2021-26296", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-06-16T00:00:00Z", "date_only": true, "value": "2021-06-16", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-26296", "record": "GSD-2021-26296", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-06-16T17:31:39Z", "date_only": false, "value": "2021-06-16T17:31:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GQ67-PP9W-43GP", "record": "GHSA-GQ67-PP9W-43GP", "field": "published"}, {"timestamp": "2021-07-19T00:00:00Z", "date_only": false, "value": "2021-07-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-539", "record": "CERTFR-2021-AVI-539", "field": "last_revision_date"}, {"timestamp": "2021-07-19T00:00:00Z", "date_only": false, "value": "2021-07-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-539", "record": "CERTFR-2021-AVI-539", "field": "initial_release_date"}, {"timestamp": "2021-07-19T00:00:00Z", "date_only": false, "value": "2021-07-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-539", "record": "CERTFR-2021-AVI-539", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-13T01:23:33.277Z", "date_only": false, "value": "2023-12-13T01:23:33.277305Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-26296", "record": "GSD-2021-26296", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T20:19:20.159Z", "date_only": false, "value": "2024-08-03T20:19:20.159Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-26296", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-03T20:20:55Z", "date_only": false, "value": "2024-08-03T20:20:55.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2021-26296", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-09T19:07:11Z", "date_only": false, "value": "2024-10-09T19:07:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/2746", "record": "CVE-2021-26296", "field": "creation_timestamp", "uuid": "ccaf2fc1-f341-4ebc-ba31-8546e650fd83", "content": "#exploit\n1. CVE-2021-26296:\nCross-Site Request Forgery in Apache MyFaces JSF Framework\nhttps://seclists.org/fulldisclosure/2021/Feb/66\n\n2. CVE-2021-21042:\nGetting Information Disclosure in Adobe Reader Through the ID Tag\nhttps://www.thezdi.com/blog/2021/2/17/zdi-21-171-getting-information-disclosure-in-adobe-reader-through-the-id-tag", "url": "https://t.me/CyberSecurityTechnologies/2746"}, {"timestamp": "2025-02-13T16:27:52.470Z", "date_only": false, "value": "2025-02-13T16:27:52.470Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-26296", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:43:04.383Z", "date_only": false, "value": "2026-06-17T03:43:04.383", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-26296", "record": "FKIE_CVE-2021-26296", "field": "lastModified"}]}