{"metadata": {"vulnerability": "CVE-2022-23131", "count": 79, "kinds": {"milestone": 4, "sighting": 37, "kev": 17, "other": 21}}, "data": [{"timestamp": "2021-11-22T00:00:00Z", "date_only": false, "value": "2021-11-22T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Zabbix", "record": "CVE-2022-23131", "field": "containers.cna.datePublic"}, {"timestamp": "2021-11-22T14:03:00Z", "date_only": false, "value": "2021-11-22T14:03:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / Zabbix", "record": "CVE-2022-23131", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2021-11-22T14:03:00Z", "date_only": false, "value": "2021-11-22T14:03:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-23131", "record": "GSD-2022-23131", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-01-11T00:00:00Z", "date_only": false, "value": "2022-01-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-23131", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-01-13T15:50:39Z", "date_only": false, "value": "2022-01-13T15:50:39.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Zabbix", "record": "CVE-2022-23131", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-01-13T15:50:39.137Z", "date_only": false, "value": "2022-01-13T15:50:39.137Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-23131", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-01-13T16:15:00Z", "date_only": false, "value": "2022-01-13T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4G73-3MXF-J47W", "record": "GHSA-4G73-3MXF-J47W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-01-13T16:15:00Z", "date_only": false, "value": "2022-01-13T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-23131", "record": "GSD-2022-23131", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-01-13T16:15:08.053Z", "date_only": false, "value": "2022-01-13T16:15:08.053", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23131", "record": "FKIE_CVE-2022-23131", "field": "published"}, {"timestamp": "2022-01-13T18:18:30Z", "date_only": false, "value": "2022-01-13T18:18:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/35414", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "e2d3d29c-0672-4338-9f96-651c110f2454", "content": "\u203c CVE-2022-23131 \u203c\n\nIn the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/35414"}, {"timestamp": "2022-01-14T00:02:17Z", "date_only": false, "value": "2022-01-14T00:02:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4G73-3MXF-J47W", "record": "GHSA-4G73-3MXF-J47W", "field": "published"}, {"timestamp": "2022-01-17T00:00:00Z", "date_only": true, "value": "2022-01-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-08298", "record": "CNVD-2022-08298", "field": "submitTime"}, {"timestamp": "2022-01-19T21:08:00Z", "date_only": false, "value": "2022-01-19T21:08Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-23131", "record": "GSD-2022-23131", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-02-04T00:00:00Z", "date_only": true, "value": "2022-02-04", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-08298", "record": "CNVD-2022-08298", "field": "openTime"}, {"timestamp": "2022-02-19T13:30:24Z", "date_only": false, "value": "2022-02-19T13:30:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5445", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "e9d3423f-304a-4cb4-8ad8-bca7cf9a159b", "content": "#Threat_Research\n1. Exploiting Jenkins build authorization\nhttps://medium.com/cider-sec/exploiting-jenkins-build-authorization-22bf72926072\n2. CVE-2022-23131 - Zabbix SAML Authentication Bypass\nhttps://blog.sonarsource.com/zabbix-case-study-of-unsafe-session-storage", "url": "https://t.me/CyberSecurityTechnologies/5445"}, {"timestamp": "2022-02-20T10:36:27Z", "date_only": false, "value": "2022-02-20T10:36:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/win_def/100", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "e8ef6ba8-8f81-4666-974d-1a85d7631a10", "content": "\u041e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML SSO \u0432 Zabbix (CVE-2022-23131)\n\n\u0415\u0441\u043b\u0438 \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 Zabbix \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 SAML SSO (\u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430) \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0430\u043d\u0441\u0430 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a Zabbix Frontend.\n\n\u0414\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0443\u0436\u043d\u043e \u0437\u043d\u0430\u0442\u044c (\u0438\u043b\u0438 \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c) \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f Zabbix \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0433\u043e\u0441\u0442\u0435\u0432\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u0412\u0438\u0434\u0435\u043e\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430  POC\n\n\u0414\u043e\u0440\u043a \u0434\u043b\u044f Shodan:\nhttp.html:zabbix http.html:saml", "url": "https://t.me/win_def/100"}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-23131", "field": "timestamps.asserted_at", "uuid": "409fdcb9-f307-44c8-b115-25cefcfcb1e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-23131", "field": "timestamps.asserted_at", "uuid": "c0521bcc-b8de-4caa-9bed-b318b168df9b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": true, "value": "2022-02-22", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-23131", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": true, "value": "2022-02-22", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2022-23131", "record": "GSD-2022-23131", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-23131", "field": "evidence.0.details.added_date", "uuid": "c0521bcc-b8de-4caa-9bed-b318b168df9b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": true, "value": "2022-02-22", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-23131", "field": "evidence.0.details.date_added", "uuid": "409fdcb9-f307-44c8-b115-25cefcfcb1e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-23131", "field": "timestamps.first_seen_at", "uuid": "409fdcb9-f307-44c8-b115-25cefcfcb1e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-23131", "field": "timestamps.first_seen_at", "uuid": "c0521bcc-b8de-4caa-9bed-b318b168df9b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-23131", "field": "status.status_updated_at", "uuid": "409fdcb9-f307-44c8-b115-25cefcfcb1e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-23131", "field": "status.status_updated_at", "uuid": "c0521bcc-b8de-4caa-9bed-b318b168df9b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-22T00:00:00Z", "date_only": false, "value": "2022-02-22T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-23131", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-02-24T13:18:32Z", "date_only": false, "value": "2022-02-24T13:18:32.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/1917", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "0352fc68-42a7-4e7f-b145-b6b9bdb518d1", "content": "U.S. cybersecurity agency CISA is warning companies about two actively exploited vulnerabilities affecting the widely used open-source Zabbix enterprise monitoring platform.\n\n\u2705 CVE-2022-23131\n\u2705 CVE-2022-23134\n\nDetails: https://thehackernews.com/2022/02/cisa-alerts-on-actively-exploited-flaws.html", "url": "https://t.me/thehackernews/1917"}, {"timestamp": "2022-02-24T16:05:51Z", "date_only": false, "value": "2022-02-24T16:05:51.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/8851", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "314bf3f2-b1e2-4b8d-8c86-e82dfdd927ac", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CISA Alerts on Actively Exploited Flaws in Zabbix; an open-source Network Monitoring Platform.\n\n\u25aa\ufe0eCVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability.\n\n\u25aa\ufe0eCVE-2022-23134: Zabbix Frontend Improper Access Control Vulnerability.\n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2022/02/22/cisa-adds-two-known-exploited-vulnerabilities-catalog\n\nhttps://thehackernews.com/2022/02/cisa-alerts-on-actively-exploited-flaws.html", "url": "https://t.me/cKure/8851"}, {"timestamp": "2022-02-25T18:16:00Z", "date_only": false, "value": "2022-02-25T18:16:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2673", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "c48b65dc-c813-43da-b6ec-44255a1a2be3", "content": "\u200b\u200b\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVE-2022-23131 \u0438 CVE-2022-23134 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e Zabbix - \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0441\u0435\u0442\u0435\u0439, \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u0438 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c CISA, \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 9,1 \u0438\u0437 10.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 SonarSource \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u0432\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435 \u043f\u043e\u0447\u0442\u0438 \u043c\u0435\u0441\u044f\u0446 \u043d\u0430\u0437\u0430\u0434.\n\nCVE-2022-23131 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430 \u0441 Zabbix Frontend. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0441 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c \u044f\u0437\u044b\u043a\u043e\u043c \u0440\u0430\u0437\u043c\u0435\u0442\u043a\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SAML (\u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0435\u0434\u0438\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (\u0435\u0434\u0438\u043d\u044b\u0439 \u0432\u0445\u043e\u0434), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u0435\u043d\u0438\u0439 \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u043c \u0443\u0441\u043b\u0443\u0433). \n\n\u0415\u0441\u043b\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f SAML SSO \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 (\u043d\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e), \u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0430\u043d\u0441\u0430 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043b\u043e\u0433\u0438\u043d \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0439 \u0432 \u0441\u0435\u0430\u043d\u0441\u0435, \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f.\u00a0\u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 Zabbix.\n\n21 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0432\u0443\u044e\u0449\u0438\u0439 PoC. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445\u00a0\u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-23134 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 (\u0441\u043a\u0440\u0438\u043f\u0442 setup.php) \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438\u00a0Zabbix\u00a0\u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (\u0432\u0435\u0440\u0441\u0438\u0438 5.4.9, 5.0.9 \u0438 4.0.37), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0448\u0430\u044e\u0442 \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0445, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u0421\u0430\u043c\u0438 \u043e\u0446\u0435\u043d\u0438\u0442\u0435 \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c", "url": "https://t.me/true_secator/2673"}, {"timestamp": "2022-03-01T05:19:42Z", "date_only": false, "value": "2022-03-01T05:19:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/8904", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "6a15b000-29fe-4bc5-9148-17f8a2f7c7f3", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 \ud83d\udce2 CVE-2022-23131: Zabbix Frontend Authentication Bypass Vulnerability.\n\nhttps://securityonline.info/cve-2022-23131-zabbix-frontend-authentication-bypass-vulnerability/", "url": "https://t.me/cKure/8904"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": true, "value": "2022-03-08", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-23131", "field": "evidence.0.details.due_date", "uuid": "409fdcb9-f307-44c8-b115-25cefcfcb1e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": true, "value": "2022-03-08", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2022-23131", "record": "GSD-2022-23131", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-04-02T18:20:12Z", "date_only": false, "value": "2022-04-02T18:20:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1826", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "ce7b7292-31b3-45ee-bef4-d3309520c001", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-23131\u6f0f\u6d1e\u5229\u7528\u5de5\u5177\u5f00\u7bb1\u5373\u7528\u3002\nURL\uff1ahttps://github.com/Kazaf6s/CVE-2022-23131-\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/1826"}, {"timestamp": "2022-04-02T18:32:38Z", "date_only": false, "value": "2022-04-02T18:32:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1827", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "86c05671-3d3f-4074-9ae4-aa8d4d46b193", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u5229\u7528\n\u63cf\u8ff0\uff1aCVE-2022-23131\u6f0f\u6d1e\u5229\u7528\u5de5\u5177\u5f00\u7bb1\u5373\u7528\u3002\nURL\uff1ahttps://github.com/Kazaf6s/CVE-2020-23131\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u5229\u7528", "url": "https://t.me/GithubRedTeam/1827"}, {"timestamp": "2022-04-02T18:43:18Z", "date_only": false, "value": "2022-04-02T18:43:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1828", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "8ca479e7-3362-4514-b968-8b3dd7e638ae", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u5229\u7528\n\u63cf\u8ff0\uff1aCVE-2022-23131\u6f0f\u6d1e\u5229\u7528\u5de5\u5177\u5f00\u7bb1\u5373\u7528\u3002\nURL\uff1ahttps://github.com/Kazaf6s/CVE-2022-23131\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u5229\u7528", "url": "https://t.me/GithubRedTeam/1828"}, {"timestamp": "2022-07-22T05:53:29Z", "date_only": false, "value": "2022-07-22T05:53:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2755", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "e93b3ff4-aadd-472b-81b8-362e42afe41d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-23131\u6f0f\u6d1e\u6279\u91cf\u68c0\u6d4b\u4e0e\u5229\u7528\u811a\u672c\nURL\uff1ahttps://github.com/1324132494/CVE-2022-23131poc-exp-zabbix-\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2755"}, {"timestamp": "2022-10-01T14:29:03Z", "date_only": false, "value": "2022-10-01T14:29:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3078", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "6fba212d-b723-4f18-8843-c0bf82b9ec63", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aZabbix-SAML-Bypass: CVE-2022-23131\nURL\uff1ahttps://github.com/Vulnmachines/Zabbix-CVE-2022-23131\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3078"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "a414b69c-0f16-4095-b355-ca735433a9f4"}, {"timestamp": "2023-10-26T05:23:35Z", "date_only": false, "value": "2023-10-26T05:23:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1361", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "a0e0db64-8083-4586-bc9f-8475005d6d6e", "content": "https://github.com/r10lab/CVE-2022-23131\n#github", "url": "https://t.me/CNArsenal/1361"}, {"timestamp": "2023-10-26T06:10:31Z", "date_only": false, "value": "2023-10-26T06:10:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3476", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "83e1f02d-ee8b-4a9d-95a7-d248c04429fc", "content": "https://github.com/r10lab/CVE-2022-23131", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3476"}, {"timestamp": "2023-10-26T10:59:01Z", "date_only": false, "value": "2023-10-26T10:59:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9265", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "1b9a4413-d9e7-45a6-adc9-4936233eb791", "content": "#exploit\n1. CVE-2023-4069:\nGetting RCE in Chrome with incomplete object initialization in the Maglev compiler\nhttps://github.blog/2023-10-17-getting-rce-in-chrome-with-incomplete-object-initialization-in-the-maglev-compiler\n\n2. CVE-2022-23131:\nZabbix SAML Bypass\nhttps://github.com/Mr-xn/cve-2022-23131\n]-> https://github.com/r10lab/CVE-2022-23131", "url": "https://t.me/CyberSecurityTechnologies/9265"}, {"timestamp": "2023-12-03T18:45:04Z", "date_only": false, "value": "2023-12-03T18:45:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1002", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "c969e311-367a-4b74-8196-190facceedc5", "content": "#ExploitObserverAlert\n\nCVE-2022-23131\n\nDESCRIPTION: Exploit Observer has 58 entries related to CVE-2022-23131. In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).\n\nFIRST-EPSS: 0.969280000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1002"}, {"timestamp": "2023-12-13T01:19:35.500Z", "date_only": false, "value": "2023-12-13T01:19:35.500345Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-23131", "record": "GSD-2022-23131", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T03:36:20.024Z", "date_only": false, "value": "2024-08-03T03:36:20.024Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-23131", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T08:40:07Z", "date_only": false, "value": "2024-08-16T08:40:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1546", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "42167581-746a-4af3-a029-1e328ee03b64", "content": "#exploit\n1. CVE-2023-4069:\nGetting RCE in Chrome with incomplete object initialization in the Maglev compiler\nhttps://github.blog/2023-10-17-getting-rce-in-chrome-with-incomplete-object-initialization-in-the-maglev-compiler\n\n2. CVE-2022-23131:\nZabbix SAML Bypass\nhttps://github.com/Mr-xn/cve-2022-23131\n]-> https://github.com/r10lab/CVE-2022-23131", "url": "https://t.me/Rootsec_2/1546"}, {"timestamp": "2024-12-24T20:26:41.918Z", "date_only": false, "value": "2024-12-24T20:26:41.918333Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971263", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "7196f69b-20a0-4733-bc57-4e4bc0361500", "url": "https://feedsin.space/feed/CISAKevBot/items/2971263"}, {"timestamp": "2025-01-29T17:20:59.458Z", "date_only": false, "value": "2025-01-29T17:20:59.458483Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-23131", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-29T17:20:59.458Z", "date_only": false, "value": "2025-01-29T17:20:59.458483Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23131", "record": "FKIE_CVE-2022-23131", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:35Z", "date_only": false, "value": "2025-02-23T02:10:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "c881c321-5aa6-4825-aa65-ddfe6f5a9b99"}, {"timestamp": "2025-02-27T16:00:09Z", "date_only": false, "value": "2025-02-27T16:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aGRchAdBZrssb-k1rTgBgmxMjwWLNORPeM8cAxqMrNH0iF8", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "84c8661c-64d6-4915-bc8f-836ffa9ffa2b"}, {"timestamp": "2025-03-05T22:00:05Z", "date_only": false, "value": "2025-03-05T22:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hCfCsWkJLNX-4ZZS6AKhD47aw1Wu0GxnlvM04EnHwON9-Gg", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "c677e42c-23dd-40e9-b29c-f21f2d10311b"}, {"timestamp": "2025-04-22T02:52:20Z", "date_only": false, "value": "2025-04-22T02:52:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/AGENTZSECURITY/1243", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "4166cb9a-7aad-4c01-a28b-b0979d6b33da", "content": "https://github.com/pikpikcu/nuclei-templates\nhttps://github.com/esetal/nuclei-bb-templates\nhttps://github.com/ARPSyndicate/kenzer-templates\nhttps://github.com/medbsq/ncl\nhttps://github.com/notnotnotveg/nuclei-custom-templates\nhttps://github.com/foulenzer/foulenzer-templates\nhttps://github.com/clarkvoss/Nuclei-Templates\nhttps://github.com/z3bd/nuclei-templates\nhttps://github.com/joanbono/nuclei-templates\nhttps://github.com/peanuth8r/Nuclei_Templates\nhttps://github.com/thebrnwal/Content-Injection-Nuclei-Script\nhttps://github.com/ree4pwn/my-nuclei-templates\nhttps://github.com/im403/nuclei-temp\nhttps://github.com/System00-Security/backflow\nhttps://github.com/geeknik/nuclei-templates-1\nhttps://github.com/geeknik/the-nuclei-templates\nhttps://github.com/optiv/mobile-nuclei-templates\nhttps://github.com/obreinx/nuceli-templates\nhttps://github.com/randomstr1ng/nuclei-sap-templates\nhttps://github.com/CharanRayudu/Custom-Nuclei-Templates\nhttps://github.com/zinminphyo0/KozinTemplates\nhttps://github.com/n1f2c3/mytemplates\nhttps://github.com/kabilan1290/templates\nhttps://github.com/smaranchand/nuclei-templates\nhttps://github.com/Saimonkabir/Nuclei-Templates\nhttps://github.com/yavolo/nuclei-templates\nhttps://github.com/sadnansakin/my-nuclei-templates\nhttps://github.com/5cr1pt/templates\nhttps://github.com/rahulkadavil/nuclei-templates\nhttps://github.com/Nithissh0708/Custom-Nuclei-Templates\nhttps://github.com/shifa123/detections\nhttps://github.com/daffainfo/my-nuclei-templates\nhttps://github.com/javaongsan/nuclei-templates\nhttps://github.com/AshiqurEmon/nuclei_templates.git\nhttps://github.com/ChiaraNRTT96/BountySkill\nhttps://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31\nhttps://gist.github.com/0x240x23elu\nhttps://github.com/NitinYadav00/My-Nuclei-Templates\nhttps://github.com/sharathkramadas/k8s-nuclei-templates\nhttps://github.com/securitytest3r/nuclei_templates_work\nhttps://github.com/MR-pentestGuy/nuclei-templates\nhttps://github.com/thelabda/nuclei-templates\nhttps://github.com/1in9e/my-nuclei-templates\nhttps://github.com/redteambrasil/nuclei-templates\nhttps://github.com/Saptak9983/Nuclei-Template\nhttps://github.com/Harish4948/Nuclei-Templates\nhttps://github.com/R-s0n/Custom_Vuln_Scan_Templates\nhttps://github.com/meme-lord/Custom-Nuclei-Templates\nhttps://github.com/rafaelcaria/Nuclei-Templates\nhttps://github.com/panch0r3d/nuclei-templates\nhttps://github.com/0x727/ObserverWard_0x727\nhttps://github.com/ethicalhackingplayground/erebus-templates\nhttps://github.com/test502git/log4j-fuzz-head-poc\nhttps://github.com/Str1am/my-nuclei-templates\nhttps://github.com/d3sca/Nuclei_Templates\nhttps://github.com/c-sh0/nuclei_templates\nhttps://github.com/glyptho/templatesallnuclei\nhttps://github.com/0xAwali/Virtual-Host\nhttps://github.com/praetorian-inc/chariot-launch-nuclei-templates\nhttps://github.com/brinhosa/brinhosa-nuclei-templates\nhttps://github.com/kh4sh3i/CVE-2022-23131\nhttps://github.com/wr00t/templates\nhttps://github.com/alexrydzak/rydzak-nuclei-templates\nhttps://github.com/adampielak/nuclei-templates\nhttps://github.com/ShangRui-hash/my-nuclei-templates\nhttps://github.com/dk4trin/templates-nuclei\nhttps://github.com/Elsfa7-110/mynuclei-templates\nhttps://github.com/ping-0day/templates\nhttps://github.com/wasp76b/nuclei-templates\nhttps://github.com/th3r4id/nuclei-templates\nhttps://github.com/themastersunil/Nuclei-TamplatesBackup.git\nhttps://github.com/justmumu/SpringShell\nhttps://github.com/trickest/log4j\nhttps://github.com/toramanemre/apache-solr-log4j-CVE-2021-44228\nhttps://github.com/toramanemre/log4j-rce-detect-waf-bypass\nhttps://github.com/blazeinfosec/nuclei-templates\nhttps://github.com/ekinsb/Nuclei-Templates\nhttps://github.com/Charseki/nuclei_templates\nhttps://github.com/testtt3424/nuclei-templates\nhttps://github.com/V0idC0de/dir-listing-iis-test", "url": "https://t.me/AGENTZSECURITY/1243"}, {"timestamp": "2025-04-22T02:52:21Z", "date_only": false, "value": "2025-04-22T02:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1248", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "07a169c6-21e4-4a76-ac50-a46a12696a5b", "content": "https://github.com/meme-lord/Custom-Nuclei-Templates\nhttps://github.com/Akokonunes/Private-Nuclei-Templates\nhttps://github.com/rafaelwdornelas/my-nuclei-templates\nhttps://github.com/rafaelcaria/Nuclei-Templates\nhttps://github.com/panch0r3d/nuclei-templates\nhttps://github.com/0x727/ObserverWard_0x727\nhttps://github.com/ethicalhackingplayground/erebus-templates\nhttps://github.com/test502git/log4j-fuzz-head-poc\nhttps://github.com/Str1am/my-nuclei-templates\nhttps://github.com/d3sca/Nuclei_Templates\nhttps://github.com/c-sh0/nuclei_templates\nhttps://github.com/glyptho/templatesallnuclei\nhttps://github.com/0xAwali/Virtual-Host\nhttps://github.com/praetorian-inc/chariot-launch-nuclei-templates\nhttps://github.com/brinhosa/brinhosa-nuclei-templates\nhttps://github.com/kh4sh3i/CVE-2022-23131\nhttps://github.com/wr00t/templates\nhttps://github.com/alexrydzak/rydzak-nuclei-templates\nhttps://github.com/adampielak/nuclei-templates\nhttps://github.com/ShangRui-hash/my-nuclei-templates\nhttps://github.com/dk4trin/templates-nuclei\nhttps://github.com/Elsfa7-110/mynuclei-templates\nhttps://github.com/ping-0day/template\nhttps://github.com/wasp76b/nuclei-templates\nhttps://github.com/th3r4id/nuclei-templates\nhttps://github.com/justmumu/SpringShell\nhttps://github.com/trickest/log4j\nhttps://github.com/toramanemre/apache-solr-log4j-CVE-2021-44228\nhttps://github.com/toramanemre/log4j-rce-detect-waf-bypass\nhttps://github.com/blazeinfosec/nuclei-templates\nhttps://github.com/ekinsb/Nuclei-Templates\nhttps://github.com/KeepHowling/all_freaking_nuclei_templates\nhttps://github.com/Odayex/Random-Nuclei-Templates\nhttps://github.com/aels/CVE-2022-37042\nhttps://github.com/tamimhasan404/Open-Source-Nuclei-Templates-Downloader\nhttps://github.com/pentest-dev/Profesional-Nuclei-Templates\nhttps://github.com/badboy-sft/badboy_17-Nuclei-Templates-Collection\nhttps://github.com/NightRang3r/misc_nuclei_templates\nhttps://github.com/ExpLangcn/NucleiTP\nhttps://github.com/0xmaximus/final_freaking_nuclei_templates\nhttps://github.com/Jagomeiister/nuclei-templates\nhttps://github.com/ricardomaia/nuclei-template-generator-for-wordpress-plugins\nhttps://github.com/Lopseg/nuclei-c-templates\nhttps://github.com/sl4x0/NC-Templates\nhttps://github.com/thecyberneh/nuclei-templatess\nhttps://github.com/yarovit-developer/nuclei-templates\nhttps://github.com/cipher387/juicyinfo-nuclei-templates\nhttps://github.com/Kaue-Navarro/Templates-kaue-nuclei\nhttps://github.com/JoshMorrison99/url-based-nuclei-templates\nhttps://github.com/ayadim/Nuclei-bug-hunter\nhttps://github.com/soumya123raj/Nuclei\nhttps://github.com/soapffz/myown-nuclei-poc\nhttps://github.com/zer0yu/Open-PoC\nhttps://github.com/SumedhDawadi/Custom-Nuclei-Template\nhttps://github.com/coldrainh/nuclei-ByMyself\nhttps://github.com/binod235/nuclei-templates-and-reports\nhttps://github.com/mbskter/Masscan2Httpx2Nuclei-Xray\nhttps://github.com/luck-ying/Library-YAML-POC\nhttps://github.com/PedroFerreira97/nuclei_templates\nhttps://github.com/Hunt2behunter/nuclei-templates\nhttps://github.com/mastersir-lab/nuclei-yaml-poc\nhttps://github.com/SirAppSec/nuclei-template-generator-log4j\nhttps://github.com/0xPugazh/my-nuclei-templates\nhttps://github.com/topscoder/nuclei-wordfence-cve\nhttps://github.com/erickfernandox/nuclei-templates\nhttps://github.com/damon-sec/Nuclei-templates-Collection\nhttps://github.com/DoubleTakes/nuclei-templates\nhttps://github.com/ptyspawnbinbash/template-enhancer\nhttps://github.com/Arvinthksrct/alltemplate\nhttps://github.com/srkgupta/cent-nuclei-templates\nhttps://github.com/UltimateSec/ultimaste-nuclei-templates\nhttps://github.com/xinZa1/template\nhttps://github.com/SirBugs/Priv8-Nuclei-Templates\nhttps://github.com/davidfortytwo/GetNucleiTemplates\nhttps://github.com/v3l4r10/Nuclei-Templates\nhttps://github.com/wearetyomsmnv/llm_integrated_nuclei_templates", "url": "https://t.me/AGENTZSECURITY/1248"}, {"timestamp": "2025-04-22T02:52:21Z", "date_only": false, "value": "2025-04-22T02:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1251", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "80119f93-a448-4f34-9d2b-03e73e7a3dcf", "content": "https://github.com/SirAppSec/nuclei-template-generator-log4j\nhttps://github.com/Str1am/my-nuclei-templates\nhttps://github.com/SumedhDawadi/Custom-Nuclei-Template\nhttps://github.com/SumedhDawadi/Nuclei_Template_Subdomain_Takeover\nhttps://github.com/System00-Security/backflow\nhttps://github.com/T4t4ru/nuclei-templates\nhttps://github.com/Tykerdestroy/Bug-bounty-custom-templates\nhttps://github.com/UnaPibaGeek/honeypots-detection\nhttps://github.com/V0idC0de/dir-listing-iis-test\nhttps://github.com/VulnExpo/nuclei-templates\nhttps://github.com/W01fh4cker/nucleiTemplatesClassifier\nhttps://github.com/YashVardhanTrip/nuclei-templates\nhttps://github.com/adampielak/nuclei-templates\nhttps://github.com/aels/CVE-2022-37042\nhttps://github.com/ahmedalroky/nuclei-templates\nhttps://github.com/akincibor/CVE-2022-27925\nhttps://github.com/al4xs/nuclei-templates\nhttps://github.com/alexrydzak/rydzak-nuclei-templates\nhttps://github.com/am0nt31r0/custom-nuclei-templates\nhttps://github.com/anmolksachan/nuclei-templates\nhttps://github.com/attacker-codeninja/My-Nuclei-Templates-2\nhttps://github.com/ayadim/Nuclei-bug-hunter\nhttps://github.com/b4dboy17/badboy_17-Nuclei-Templates-Collection\nhttps://github.com/badboy-sft/badboy_17-Nuclei-Templates-Collection\nhttps://github.com/badboycxcc/CVE-2023-24100\nhttps://github.com/baharebenesbordi/Nuclei-Templates\nhttps://github.com/bhataasim1/PersonalTemplates\nhttps://github.com/binod235/nuclei-templates-and-reports\nhttps://github.com/bjhulst/nuclei-custom-templates\nhttps://github.com/blazeinfosec/nuclei-templates\nhttps://github.com/boobooHQ/private_templates\nhttps://github.com/brinhosa/brinhosa-nuclei-templates\nhttps://github.com/bufferbandit/gitScanNucleiTemplate\nhttps://github.com/bugbountydude/Nuclei-TamplatesBackup\nhttps://github.com/c-sh0/nuclei_templates\nhttps://github.com/c3l3si4n/malicious_nuclei_templates\nhttps://github.com/chouaibhm/foulenzer-templates\nhttps://github.com/cipher387/juicyinfo-nuclei-templates\nhttps://github.com/clarkvoss/Nuclei-Templates\nhttps://github.com/coldrainh/nuclei-ByMyself\nhttps://github.com/compr00t/nuclei-templates\nhttps://github.com/d3sca/Nuclei_Templates\nhttps://github.com/daffainfo/my-nuclei-templates\nhttps://github.com/damon-sec/Nuclei-templates-Collection\nhttps://github.com/damon-sec/TCSZ-Nuclei\nhttps://github.com/dk4trin/templates-nuclei\nhttps://github.com/drfabiocastro/certwatcher-templates\nhttps://github.com/e1abrador/SpringCorePoC.sh\nhttps://github.com/ed-red/redmc_custom_templates_nuclei\nhttps://github.com/ekinsb/Nuclei-Templates\nhttps://github.com/emadshanab/nucleiDB\nhttps://github.com/erickfernandox/nuclei-templates\nhttps://github.com/esetal/nuclei-bb-templates\nhttps://github.com/ethicalhackingplayground/erebus-templates\nhttps://github.com/fostane/my-nuclei-templates-1\nhttps://github.com/geeknik/nuclei-templates-1\nhttps://github.com/geeknik/the-nuclei-templates\nhttps://github.com/glyptho/templatesallnuclei\nhttps://github.com/h4ndsh/nuclei-templates\nhttps://github.com/ibaiw/nuclei_templates\nhttps://github.com/im403/nuclei-temp\nhttps://github.com/imhunterand/nuclei-custom-templates\nhttps://github.com/javaongsan/nuclei-templates\nhttps://github.com/justmumu/SpringShell\nhttps://github.com/k00kx/nuclei-templates\nhttps://github.com/kaanatmacaa/CVE-2024-23897\nhttps://github.com/kabilan1290/templates\nhttps://github.com/kernel-krunch/nuclei-templates\nhttps://github.com/kh4sh3i/CVE-2022-23131\nhttps://github.com/kh4sh3i/Nextcloud-Pentesting\nhttps://github.com/kh4sh3i/Webmin-CVE\nhttps://github.com/learnerboy88/CVE-2023-29489\nhttps://github.com/lliwi/nuclei-repo-hunter\nhttps://github.com/luck-ying/Library-YAML-POC\nhttps://github.com/manasmbellani/nuclei-templates\nhttps://github.com/marcositu/nuclei-custom-templates\nhttps://github.com/mastersir-lab/nuclei-yaml-poc\nhttps://github.com/mbskter/Masscan2Httpx2Nuclei-Xray", "url": "https://t.me/AGENTZSECURITY/1251"}, {"timestamp": "2025-09-23T11:47:00Z", "date_only": false, "value": "2025-09-23T11:47:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/09/23/cisa-warns-of-attacks-exploiting.html", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "5b9a0d07-d0f5-498c-a4a6-8545f751ba33", "url": "https://threatintel.cc/2025/09/23/cisa-warns-of-attacks-exploiting.html"}, {"timestamp": "2025-10-21T23:15:49.275Z", "date_only": false, "value": "2025-10-21T23:15:49.275Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-23131", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:49.275Z", "date_only": false, "value": "2025-10-21T23:15:49.275Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-23131", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:28Z", "date_only": false, "value": "2025-10-22T00:32:28Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4G73-3MXF-J47W", "record": "GHSA-4G73-3MXF-J47W", "field": "modified"}, {"timestamp": "2026-02-02T12:28:22.515Z", "date_only": false, "value": "2026-02-02T12:28:22.515995Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/af44b085-9a00-4c2c-ab8c-8387cce1be46", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "b439f557-d0f9-486b-b05b-42ddec5d399c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/af44b085-9a00-4c2c-ab8c-8387cce1be46"}, {"timestamp": "2026-02-02T12:28:22.515Z", "date_only": false, "value": "2026-02-02T12:28:22.515995Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/af44b085-9a00-4c2c-ab8c-8387cce1be46", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "9da54261-1e48-4423-b532-53282f108d13", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/af44b085-9a00-4c2c-ab8c-8387cce1be46"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-23131", "field": "timestamps.recorded_at", "uuid": "409fdcb9-f307-44c8-b115-25cefcfcb1e5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T04:29:34.147Z", "date_only": false, "value": "2026-06-17T04:29:34.147", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23131", "record": "FKIE_CVE-2022-23131", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:37.895Z", "date_only": false, "value": "2026-06-19T12:47:37.895410Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/306a363d-9f00-4b88-9ca9-4c5bf1ef0d0a", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "02be98d3-4a4f-4ace-8fc6-d0179725f820", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/306a363d-9f00-4b88-9ca9-4c5bf1ef0d0a"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-23131", "field": "timestamps.recorded_at", "uuid": "c0521bcc-b8de-4caa-9bed-b318b168df9b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:30.467Z", "date_only": false, "value": "2026-06-23T11:13:30.467208Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c0521bcc-b8de-4caa-9bed-b318b168df9b", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "939f9576-71f3-4de6-978e-56940d5f3be1", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c0521bcc-b8de-4caa-9bed-b318b168df9b"}, {"timestamp": "2026-06-23T14:04:57.758Z", "date_only": false, "value": "2026-06-23T14:04:57.758283Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/52b03d4c-448f-46e8-b580-2f16aa9154c1", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "6c0cf0ae-8e5c-4568-97a2-8c6c34c0678d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/52b03d4c-448f-46e8-b580-2f16aa9154c1"}, {"timestamp": "2026-07-29T12:01:01.615Z", "date_only": false, "value": "2026-07-29T12:01:01.615471Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/2133", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "0e201b10-4d3e-4a9a-b27a-e5f74a6b8dc9", "url": "https://t.me/CVEhub/2133"}, {"timestamp": "2026-07-30T00:01:41.078Z", "date_only": false, "value": "2026-07-30T00:01:41.078150Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/2133", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "a45a415d-ab29-4b24-b97f-2200e5fcfe0d", "url": "https://t.me/CVEhub/2133"}, {"timestamp": "2026-08-01T04:00:04.564Z", "date_only": false, "value": "2026-08-01T04:00:04.564878Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/2133", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "83e337c3-e994-4b8a-8433-bea03a18e81b", "url": "https://t.me/CVEhub/2133"}, {"timestamp": "2026-08-02T00:01:17.755Z", "date_only": false, "value": "2026-08-02T00:01:17.755616Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/2133", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "c8c734da-b3c4-4408-b504-a9479b4d3850", "url": "https://t.me/CVEhub/2133"}, {"timestamp": "2026-09-01T20:01:53.555Z", "date_only": false, "value": "2026-09-01T20:01:53.555972Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/43621", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "391afafa-db01-4a6f-9263-6ecedcb14003", "url": "https://t.me/hacking_Attack/43621"}, {"timestamp": "2026-09-21T04:04:40Z", "date_only": false, "value": "2026-09-21T04:04:40+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-23131", "field": "timestamps.asserted_at", "uuid": "8951f630-379d-44c5-a3ac-f87643e74ca8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-21T04:04:40Z", "date_only": false, "value": "2026-09-21T04:04:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-23131", "field": "timestamps.first_seen_at", "uuid": "8951f630-379d-44c5-a3ac-f87643e74ca8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-23131", "field": "timestamps.last_seen_at", "uuid": "8951f630-379d-44c5-a3ac-f87643e74ca8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": true, "value": "2026-10-18", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-23131", "field": "evidence.0.details.observation_date", "uuid": "8951f630-379d-44c5-a3ac-f87643e74ca8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-23131", "field": "status.status_updated_at", "uuid": "8951f630-379d-44c5-a3ac-f87643e74ca8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:03:44Z", "date_only": false, "value": "2026-10-21T09:03:44+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-23131", "field": "timestamps.recorded_at", "uuid": "8951f630-379d-44c5-a3ac-f87643e74ca8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:13:27.507Z", "date_only": false, "value": "2026-10-21T09:13:27.507241Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8951f630-379d-44c5-a3ac-f87643e74ca8", "record": "CVE-2022-23131", "field": "creation_timestamp", "uuid": "53ed2037-e2e8-4dd2-937b-4159116b5c67", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8951f630-379d-44c5-a3ac-f87643e74ca8"}]}