{"metadata": {"vulnerability": "CVE-2022-2190", "count": 25, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 12}}, "data": [{"timestamp": "2022-04-05T07:21:47Z", "date_only": false, "value": "2022-04-05T07:21:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1236", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "76da2923-8a8f-438d-b843-e7bacabf8d73", "content": "CVE-2022-21907 HTTP Protocol Stack RCE Vulnerability\n\n#RCE #Vulnerability #Metasploit #Nmap #Powershell\n#CVE-2022-21907 #CVE-2022-2190 #Exploit #Dos #Ddos\n#Hacking #Microsoft #Bugbounty #RemoteCodeExecution\n\nhttps://reconshell.com/cve-2022-21907-http-protocol-stack-rce-vulnerability/", "url": "https://t.me/reconshell/1236", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-04-09T07:39:13Z", "date_only": false, "value": "2022-04-09T07:39:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-6ODXgzzWCxBZpYl68OshWRdD8e5O8jb0SVarNqOSvRoOA0", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "ff6e2eb1-01b2-4d50-aa45-f7d593d71e8f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-06-23T00:00:00Z", "date_only": false, "value": "2022-06-23T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-2190", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-10-31T00:00:00Z", "date_only": false, "value": "2022-10-31T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2190", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-10-31T00:00:00Z", "date_only": false, "value": "2022-10-31T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / WPScan", "record": "CVE-2022-2190", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-10-31T16:15:00Z", "date_only": false, "value": "2022-10-31T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QQX8-XHRR-9M9M", "record": "GHSA-QQX8-XHRR-9M9M", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-10-31T16:15:00Z", "date_only": false, "value": "2022-10-31T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-2190", "record": "GSD-2022-2190", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-10-31T16:15:10.747Z", "date_only": false, "value": "2022-10-31T16:15:10.747", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2190", "record": "FKIE_CVE-2022-2190", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-31T19:00:27Z", "date_only": false, "value": "2022-10-31T19:00:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QQX8-XHRR-9M9M", "record": "GHSA-QQX8-XHRR-9M9M", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-10-31T19:37:58Z", "date_only": false, "value": "2022-10-31T19:37:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/52290", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "e2910f54-0a35-4194-8221-8318137d9be3", "content": "\u203c CVE-2022-2190 \u203c\n\nThe Gallery Plugin for WordPress plugin before 1.8.4.7 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/52290"}, {"timestamp": "2022-11-01T14:03:00Z", "date_only": false, "value": "2022-11-01T14:03Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-2190", "record": "GSD-2022-2190", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2022-11-01T19:00:31Z", "date_only": false, "value": "2022-11-01T19:00:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QQX8-XHRR-9M9M", "record": "GHSA-QQX8-XHRR-9M9M", "field": "modified", "linked_record": true}, {"timestamp": "2023-12-13T01:19:20.110Z", "date_only": false, "value": "2023-12-13T01:19:20.110477Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-2190", "record": "GSD-2022-2190", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-03T00:32:08.736Z", "date_only": false, "value": "2024-08-03T00:32:08.736Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-2190", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-29T06:29:08Z", "date_only": false, "value": "2024-08-29T06:29:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ARC15INFO/351", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "e860097f-f230-4781-940f-aeb61de4f150", "content": "CVE-2022-21907 HTTP Protocol Stack RCE Vulnerability\n\n#RCE #Vulnerability #Metasploit #Nmap #Powershell\n#CVE-2022-21907 #CVE-2022-2190 #Exploit #Dos #Ddos\n#Hacking #Microsoft #Bugbounty #RemoteCodeExecution\n\nhttps://reconshell.com/cve-2022-21907-http-protocol-stack-rce-vulnerability/", "url": "https://t.me/ARC15INFO/351", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-07T13:24:13.235Z", "date_only": false, "value": "2025-05-07T13:24:13.235758Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2190", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-07T13:24:13.235Z", "date_only": false, "value": "2025-05-07T13:24:13.235758Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2190", "record": "FKIE_CVE-2022-2190", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-07T13:24:51.319Z", "date_only": false, "value": "2025-05-07T13:24:51.319Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-2190", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-07T13:24:51.319Z", "date_only": false, "value": "2025-05-07T13:24:51.319Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-2190", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:41:28.120Z", "date_only": false, "value": "2026-06-17T04:41:28.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2190", "record": "FKIE_CVE-2022-2190", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-02T16:13:05.990Z", "date_only": false, "value": "2026-08-02T16:13:05.990311Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/K0a89wronOXzEhnmD7Qf737NDEZfjjpirHYYWg73RxkrcA", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "7f5be857-19f7-43b9-9613-dc98d08fab22", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T02:07:04.824Z", "date_only": false, "value": "2026-08-03T02:07:04.824572Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/K0a89wronOXzEhnmD7Qf737NDEZfjjpirHYYWg73RxkrcA", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "57c005cf-cb1b-40bb-9a91-a911a209e0c3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-12T17:00:05.034Z", "date_only": false, "value": "2026-08-12T17:00:05.034358Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eTVXVkklN15mxiDg8VCW76aVELrDLLJo5-2bFs9d1hQAO9s", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "556e1887-bab6-4f52-bbf7-09c1931201d9", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-16T19:00:04.444Z", "date_only": false, "value": "2026-08-16T19:00:04.444470Z", "kind": "sighting", "label": "Seen", "source": "Telegram/duNzUF9-oylPLk701LFsSSb7xHHo4bgEcxTqB_dEbrJBpig", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "697cbe3b-1d84-476c-a7aa-a7ed5cbd478a"}, {"timestamp": "2026-08-17T00:00:11.176Z", "date_only": false, "value": "2026-08-17T00:00:11.176489Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/duNzUF9-oylPLk701LFsSSb7xHHo4bgEcxTqB_dEbrJBpig", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "2be831f2-99f2-4dda-9bae-7437e0055d87", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-12T01:50:54.424Z", "anchors": {"origin": {"timestamp": "2022-10-31T00:00:00Z", "date_only": false, "value": "2022-10-31T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2190", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-10-31T00:00:00Z", "date_only": false, "value": "2022-10-31T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2190", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-04-05T07:21:47Z", "date_only": false, "value": "2022-04-05T07:21:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1236", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "76da2923-8a8f-438d-b843-e7bacabf8d73", "content": "CVE-2022-21907 HTTP Protocol Stack RCE Vulnerability\n\n#RCE #Vulnerability #Metasploit #Nmap #Powershell\n#CVE-2022-21907 #CVE-2022-2190 #Exploit #Dos #Ddos\n#Hacking #Microsoft #Bugbounty #RemoteCodeExecution\n\nhttps://reconshell.com/cve-2022-21907-http-protocol-stack-rce-vulnerability/", "url": "https://t.me/reconshell/1236", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -18031093.0, "hours": -5008.636944444444, "days": -208.6932060185185, "min_seconds": -18117493.0, "max_seconds": -18031093.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2022-10-31T00:00:00Z", "date_only": false, "value": "2022-10-31T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2190", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-04-05T07:21:47Z", "date_only": false, "value": "2022-04-05T07:21:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1236", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "76da2923-8a8f-438d-b843-e7bacabf8d73", "content": "CVE-2022-21907 HTTP Protocol Stack RCE Vulnerability\n\n#RCE #Vulnerability #Metasploit #Nmap #Powershell\n#CVE-2022-21907 #CVE-2022-2190 #Exploit #Dos #Ddos\n#Hacking #Microsoft #Bugbounty #RemoteCodeExecution\n\nhttps://reconshell.com/cve-2022-21907-http-protocol-stack-rce-vulnerability/", "url": "https://t.me/reconshell/1236", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 127273854.424051, "hours": 35353.848451125275, "days": 1473.0770187968867, "min_seconds": 127187454.424051, "max_seconds": 127273854.424051, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-10-31T00:00:00Z", "date_only": false, "value": "2022-10-31T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-2190", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-12T01:50:54.424Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 145304947.424051, "hours": 40362.48539556972, "days": 1681.7702248154048, "min_seconds": 145304947.424051, "max_seconds": 145304947.424051, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-04-05T07:21:47Z", "date_only": false, "value": "2022-04-05T07:21:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reconshell/1236", "record": "CVE-2022-2190", "field": "creation_timestamp", "uuid": "76da2923-8a8f-438d-b843-e7bacabf8d73", "content": "CVE-2022-21907 HTTP Protocol Stack RCE Vulnerability\n\n#RCE #Vulnerability #Metasploit #Nmap #Powershell\n#CVE-2022-21907 #CVE-2022-2190 #Exploit #Dos #Ddos\n#Hacking #Microsoft #Bugbounty #RemoteCodeExecution\n\nhttps://reconshell.com/cve-2022-21907-http-protocol-stack-rce-vulnerability/", "url": "https://t.me/reconshell/1236", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-12T01:50:54.424Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}