{"metadata": {"vulnerability": "CVE-2021-39192", "count": 19, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 12}}, "data": [{"timestamp": "2021-07-22T19:43:16Z", "date_only": false, "value": "2021-07-22T19:43:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J5C2-HM46-WP5C", "record": "GHSA-J5C2-HM46-WP5C", "field": "published"}, {"timestamp": "2021-08-16T00:00:00Z", "date_only": false, "value": "2021-08-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-39192", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-03T00:00:00Z", "date_only": true, "value": "2021-09-03", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-39192", "record": "GSD-2021-39192", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-09-03T14:50:09Z", "date_only": false, "value": "2021-09-03T14:50:09.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-39192", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-09-03T14:50:09Z", "date_only": false, "value": "2021-09-03T14:50:09.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2021-39192", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-09-03T15:15:00Z", "date_only": false, "value": "2021-09-03T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J5C2-HM46-WP5C", "record": "GHSA-J5C2-HM46-WP5C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-09-03T15:15:00Z", "date_only": false, "value": "2021-09-03T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-39192", "record": "GSD-2021-39192", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-09-03T15:15:09.410Z", "date_only": false, "value": "2021-09-03T15:15:09.410", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39192", "record": "FKIE_CVE-2021-39192", "field": "published"}, {"timestamp": "2021-09-03T18:37:09Z", "date_only": false, "value": "2021-09-03T18:37:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/28262", "record": "CVE-2021-39192", "field": "creation_timestamp", "uuid": "753802d4-e48c-4575-bfc6-5bccec6a2289", "content": "\u203c CVE-2021-39192 \u203c\n\nGhost is a Node.js content management system. An error in the implementation of the limits service between versions 4.0.0 and 4.9.4 allows all authenticated users (including contributors) to view admin-level API keys via the integrations API endpoint, leading to a privilege escalation vulnerability. This issue is patched in Ghost version 4.10.0. As a workaround, disable all non-Administrator accounts to prevent API access. It is highly recommended to regenerate all API keys after patching or applying the workaround.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/28262"}, {"timestamp": "2021-09-03T20:23:05Z", "date_only": false, "value": "2021-09-03T20:23:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J5C2-HM46-WP5C", "record": "GHSA-J5C2-HM46-WP5C", "field": "modified"}, {"timestamp": "2021-09-10T00:00:00Z", "date_only": true, "value": "2021-09-10", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-39192", "record": "GSD-2021-39192", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-09-10T19:02:00Z", "date_only": false, "value": "2021-09-10T19:02Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-39192", "record": "GSD-2021-39192", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:23:15.507Z", "date_only": false, "value": "2023-12-13T01:23:15.507395Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-39192", "record": "GSD-2021-39192", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-09T08:51:04Z", "date_only": false, "value": "2024-01-09T08:51:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2736", "record": "CVE-2021-39192", "field": "creation_timestamp", "uuid": "65926cf3-4eb0-4356-a1e7-3abd6c6959e0", "content": "#ExploitObserverAlert\n\nCVE-2021-39192\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2021-39192. Ghost is a Node.js content management system. An error in the implementation of the limits service between versions 4.0.0 and 4.9.4 allows all authenticated users (including contributors) to view admin-level API keys via the integrations API endpoint, leading to a privilege escalation vulnerability. This issue is patched in Ghost version 4.10.0. As a workaround, disable all non-Administrator accounts to prevent API access. It is highly recommended to regenerate all API keys after patching or applying the workaround.\n\nFIRST-EPSS: 0.000950000\nNVD-IS: 5.9\nNVD-ES: 1.2", "url": "https://t.me/arpsyndicate/2736"}, {"timestamp": "2024-03-06T10:54:14.780Z", "date_only": false, "value": "2024-03-06T10:54:14.780Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GHOST-2021-39192", "record": "BIT-GHOST-2021-39192", "field": "published"}, {"timestamp": "2024-08-04T01:58:18.191Z", "date_only": false, "value": "2024-08-04T01:58:18.191Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-39192", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T01:58:18.191Z", "date_only": false, "value": "2024-08-04T01:58:18.191Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-39192", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:03:16.983Z", "date_only": false, "value": "2026-06-17T04:03:16.983", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39192", "record": "FKIE_CVE-2021-39192", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GHOST-2021-39192", "record": "BIT-GHOST-2021-39192", "field": "modified"}]}