{"metadata": {"vulnerability": "CVE-2021-39246", "count": 22, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 9}}, "data": [{"timestamp": "2021-08-17T00:00:00Z", "date_only": false, "value": "2021-08-17T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-24T18:08:05Z", "date_only": false, "value": "2021-09-24T18:08:05.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2021-09-24T19:15:00Z", "date_only": false, "value": "2021-09-24T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MQMF-5457-4F39", "record": "GHSA-MQMF-5457-4F39", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2021-09-24T19:15:00Z", "date_only": false, "value": "2021-09-24T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-39246", "record": "GSD-2021-39246", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2021-09-24T19:15:07.147Z", "date_only": false, "value": "2021-09-24T19:15:07.147", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39246", "record": "FKIE_CVE-2021-39246", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2021-09-24T22:31:02Z", "date_only": false, "value": "2021-09-24T22:31:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/29402", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "8ad9770b-a9fa-4c6e-9b11-c2064b0fe09b", "content": "\u203c CVE-2021-39246 \u203c\n\nTor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. If --log or --verbose is used, exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compare them to timestamp data collected by the destination server (or collected by a rogue site within the Tor network).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/29402"}, {"timestamp": "2021-09-26T06:30:57Z", "date_only": false, "value": "2021-09-26T06:30:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7313", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "982b572f-9b53-4ab5-ae73-82b38bc4d97b", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux\n\nhttps://sick.codes/sick-2021-111/", "url": "https://t.me/cKure/7313", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-09-27T13:09:13Z", "date_only": false, "value": "2021-09-27T13:09:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4386", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "0a0ac6c9-e1df-485d-99cd-b86b2b2e940c", "content": "#exploit\n1. CVE-2021-39246:\nTor Browser through 10.5.6, 11.x through 11.0a4 allows a correlation attack excessive verbose logging - Windows, macOS, Linux\nhttps://sick.codes/sick-2021-111\n2. CVE-2020-10086:\nGitLab 10.4 - 12.8.1 - Directory Traversal\nhttps://github.com/Mochican/CVE-2021-10086", "url": "https://t.me/CyberSecurityTechnologies/4386", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2021-09-30T01:23:33Z", "date_only": false, "value": "2021-09-30T01:23:33.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-39246", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-10-01T13:00:00Z", "date_only": false, "value": "2021-10-01T13:00Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-39246", "record": "GSD-2021-39246", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-05-24T19:15:41Z", "date_only": false, "value": "2022-05-24T19:15:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MQMF-5457-4F39", "record": "GHSA-MQMF-5457-4F39", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-05-24T19:15:41Z", "date_only": false, "value": "2022-05-24T19:15:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MQMF-5457-4F39", "record": "GHSA-MQMF-5457-4F39", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:23:15.250Z", "date_only": false, "value": "2023-12-13T01:23:15.250201Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-39246", "record": "GSD-2021-39246", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-04T02:06:42.498Z", "date_only": false, "value": "2024-08-04T02:06:42.498Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T02:06:42.498Z", "date_only": false, "value": "2024-08-04T02:06:42.498Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-39246", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:03:23.677Z", "date_only": false, "value": "2026-06-17T04:03:23.677", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39246", "record": "FKIE_CVE-2021-39246", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:02:53.462Z", "date_only": false, "value": "2026-07-29T12:02:53.462251Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1648", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "7ad32715-330d-4a4c-8f5c-7ead91e9b836", "url": "https://t.me/reverseame/1648"}, {"timestamp": "2026-07-30T00:02:43.811Z", "date_only": false, "value": "2026-07-30T00:02:43.811921Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/1648", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "e982d598-a792-4482-8a3b-413d5e1067a9", "url": "https://t.me/reverseame/1648"}, {"timestamp": "2026-08-03T07:13:06.422Z", "date_only": false, "value": "2026-08-03T07:13:06.422888Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1648", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "51b954a3-72ed-4a13-98b2-70d5ae4a145b", "url": "https://t.me/reverseame/1648", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-04T00:00:47.858Z", "date_only": false, "value": "2026-08-04T00:00:47.858516Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/1648", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "3532f2f5-68a9-4869-b71e-1e872c457af8", "url": "https://t.me/reverseame/1648", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:39.384Z", "date_only": false, "value": "2026-09-01T17:00:39.384206Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4477", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "21e036e3-1535-439c-b3d6-6f92e6ad0be2", "url": "https://t.me/cissp/4477"}, {"timestamp": "2026-09-10T19:00:05.935Z", "date_only": false, "value": "2026-09-10T19:00:05.935207Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4477", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "45d333c9-43b9-4019-9fbf-3f4be2118acb", "url": "https://t.me/cissp/4477", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-14T17:47:03.018Z", "anchors": {"origin": {"timestamp": "2021-09-24T18:08:05Z", "date_only": false, "value": "2021-09-24T18:08:05.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2021-09-24T18:08:05Z", "date_only": false, "value": "2021-09-24T18:08:05.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2021-09-26T06:30:57Z", "date_only": false, "value": "2021-09-26T06:30:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7313", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "982b572f-9b53-4ab5-ae73-82b38bc4d97b", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux\n\nhttps://sick.codes/sick-2021-111/", "url": "https://t.me/cKure/7313", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 130972.0, "hours": 36.38111111111111, "days": 1.5158796296296295, "min_seconds": 130972.0, "max_seconds": 130972.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-24T18:08:05Z", "date_only": false, "value": "2021-09-24T18:08:05.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2021-09-26T06:30:57Z", "date_only": false, "value": "2021-09-26T06:30:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7313", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "982b572f-9b53-4ab5-ae73-82b38bc4d97b", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux\n\nhttps://sick.codes/sick-2021-111/", "url": "https://t.me/cKure/7313", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 162171538.0184, "hours": 45047.64944955556, "days": 1876.9853937314817, "min_seconds": 162171538.0184, "max_seconds": 162171538.0184, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-24T18:08:05Z", "date_only": false, "value": "2021-09-24T18:08:05.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-39246", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T17:47:03.018Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 162040566.0184, "hours": 45011.268338444446, "days": 1875.469514101852, "min_seconds": 162040566.0184, "max_seconds": 162040566.0184, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2021-09-26T06:30:57Z", "date_only": false, "value": "2021-09-26T06:30:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7313", "record": "CVE-2021-39246", "field": "creation_timestamp", "uuid": "982b572f-9b53-4ab5-ae73-82b38bc4d97b", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-39246 \u2013 Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging \u2013 Windows, macOS, Linux\n\nhttps://sick.codes/sick-2021-111/", "url": "https://t.me/cKure/7313", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T17:47:03.018Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}