{"metadata": {"vulnerability": "CVE-2021-46080", "count": 27, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 19}}, "data": [{"timestamp": "2022-01-03T00:00:00Z", "date_only": false, "value": "2022-01-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-46080", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-01-06T00:00:00Z", "date_only": false, "value": "2022-01-06T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202201-0077", "record": "VAR-202201-0077", "field": "sources_release_date.data.0.date", "linked_record": true}, {"timestamp": "2022-01-06T14:47:43Z", "date_only": false, "value": "2022-01-06T14:47:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-46080", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-01-06T14:47:43Z", "date_only": false, "value": "2022-01-06T14:47:43.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2021-46080", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-01-06T15:15:00Z", "date_only": false, "value": "2022-01-06T15:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5PXG-X45F-JCHM", "record": "GHSA-5PXG-X45F-JCHM", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-01-06T15:15:00Z", "date_only": false, "value": "2022-01-06T15:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-46080", "record": "GSD-2021-46080", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-01-06T15:15:08.743Z", "date_only": false, "value": "2022-01-06T15:15:08.743000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202201-0077", "record": "VAR-202201-0077", "field": "sources_release_date.data.3.date", "linked_record": true}, {"timestamp": "2022-01-06T15:15:08.743Z", "date_only": false, "value": "2022-01-06T15:15:08.743", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-46080", "record": "FKIE_CVE-2021-46080", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-01-06T18:41:15Z", "date_only": false, "value": "2022-01-06T18:41:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/35060", "record": "CVE-2021-46080", "field": "creation_timestamp", "uuid": "262f91df-2032-4244-9bb0-36475e9703d8", "content": "\u203c CVE-2021-46080 \u203c\n\nA Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/35060"}, {"timestamp": "2022-01-07T00:00:00Z", "date_only": true, "value": "2022-01-07", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-04532", "record": "CNVD-2022-04532", "field": "submitTime", "linked_record": true}, {"timestamp": "2022-01-07T00:00:36Z", "date_only": false, "value": "2022-01-07T00:00:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5PXG-X45F-JCHM", "record": "GHSA-5PXG-X45F-JCHM", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-01-13T00:00:00Z", "date_only": false, "value": "2022-01-13T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202201-0077", "record": "VAR-202201-0077", "field": "sources_update_date.data.0.date", "linked_record": true}, {"timestamp": "2022-01-13T13:53:00Z", "date_only": false, "value": "2022-01-13T13:53Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-46080", "record": "GSD-2021-46080", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-01-14T00:03:03Z", "date_only": false, "value": "2022-01-14T00:03:03Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5PXG-X45F-JCHM", "record": "GHSA-5PXG-X45F-JCHM", "field": "modified", "linked_record": true}, {"timestamp": "2022-01-14T21:47:00Z", "date_only": false, "value": "2022-01-14T21:47:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1337", "record": "CVE-2021-46080", "field": "creation_timestamp", "uuid": "f3cf2990-f89b-4a56-84df-93a1f8bb305f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-46080 - A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.\nURL\uff1ahttps://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS", "url": "https://t.me/GithubRedTeam/1337", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-01-14T21:51:10Z", "date_only": false, "value": "2022-01-14T21:51:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1338", "record": "CVE-2021-46080", "field": "creation_timestamp", "uuid": "e835cd3a-b6a9-4b39-b7cd-bcf10dda3243", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-46080 - A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.\nURL\uff1ahttps://github.com/plsanu/CVE-2021-46080", "url": "https://t.me/GithubRedTeam/1338", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-01-17T00:00:00Z", "date_only": false, "value": "2022-01-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202201-0077", "record": "VAR-202201-0077", "field": "sources_update_date.data.2.date", "linked_record": true}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-04532", "record": "CNVD-2022-04532", "field": "openTime", "linked_record": true}, {"timestamp": "2023-01-30T00:00:00Z", "date_only": false, "value": "2023-01-30T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202201-0077", "record": "VAR-202201-0077", "field": "sources_release_date.data.1.date", "linked_record": true}, {"timestamp": "2023-01-30T08:26:00Z", "date_only": false, "value": "2023-01-30T08:26:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202201-0077", "record": "VAR-202201-0077", "field": "sources_update_date.data.1.date", "linked_record": true}, {"timestamp": "2023-12-13T01:23:32.728Z", "date_only": false, "value": "2023-12-13T01:23:32.728872Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-46080", "record": "GSD-2021-46080", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-04T05:02:10.268Z", "date_only": false, "value": "2024-08-04T05:02:10.268Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-46080", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T05:02:10.268Z", "date_only": false, "value": "2024-08-04T05:02:10.268Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-46080", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-21T06:33:36.543Z", "date_only": false, "value": "2024-11-21T06:33:36.543000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202201-0077", "record": "VAR-202201-0077", "field": "sources_update_date.data.3.date", "linked_record": true}, {"timestamp": "2025-01-30T22:13:11.583Z", "date_only": false, "value": "2025-01-30T22:13:11.583000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202201-0077", "record": "VAR-202201-0077", "field": "last_update_date", "linked_record": true}, {"timestamp": "2026-05-12T18:03:01Z", "date_only": false, "value": "2026-05-12T18:03:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/83980", "record": "CVE-2021-46080", "field": "creation_timestamp", "uuid": "9bd6e9f0-7b6d-4c01-a0a5-71414840a2fa", "url": "https://t.me/GithubRedTeam/83980"}, {"timestamp": "2026-06-17T04:14:31.347Z", "date_only": false, "value": "2026-06-17T04:14:31.347", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-46080", "record": "FKIE_CVE-2021-46080", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-14T22:01:57.723Z", "anchors": {"origin": {"timestamp": "2022-01-06T14:47:43Z", "date_only": false, "value": "2022-01-06T14:47:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-46080", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-01-06T14:47:43Z", "date_only": false, "value": "2022-01-06T14:47:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-46080", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-01-14T21:47:00Z", "date_only": false, "value": "2022-01-14T21:47:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1337", "record": "CVE-2021-46080", "field": "creation_timestamp", "uuid": "f3cf2990-f89b-4a56-84df-93a1f8bb305f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-46080 - A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.\nURL\uff1ahttps://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS", "url": "https://t.me/GithubRedTeam/1337", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 716357.0, "hours": 198.98805555555555, "days": 8.291168981481482, "min_seconds": 716357.0, "max_seconds": 716357.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-01-06T14:47:43Z", "date_only": false, "value": "2022-01-06T14:47:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-46080", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-01-14T21:47:00Z", "date_only": false, "value": "2022-01-14T21:47:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1337", "record": "CVE-2021-46080", "field": "creation_timestamp", "uuid": "f3cf2990-f89b-4a56-84df-93a1f8bb305f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-46080 - A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.\nURL\uff1ahttps://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS", "url": "https://t.me/GithubRedTeam/1337", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 153213254.723897, "hours": 42559.23742330472, "days": 1773.3015593043635, "min_seconds": 153213254.723897, "max_seconds": 153213254.723897, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-01-06T14:47:43Z", "date_only": false, "value": "2022-01-06T14:47:43.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-46080", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T22:01:57.723Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 152496897.723897, "hours": 42360.24936774917, "days": 1765.0103903228821, "min_seconds": 152496897.723897, "max_seconds": 152496897.723897, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-01-14T21:47:00Z", "date_only": false, "value": "2022-01-14T21:47:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1337", "record": "CVE-2021-46080", "field": "creation_timestamp", "uuid": "f3cf2990-f89b-4a56-84df-93a1f8bb305f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2021\n\u63cf\u8ff0\uff1aCVE-2021-46080 - A Cross Site Request Forgery (CSRF) vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability.\nURL\uff1ahttps://github.com/plsanu/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS", "url": "https://t.me/GithubRedTeam/1337", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T22:01:57.723Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}