{"metadata": {"vulnerability": "CVE-2022-24112", "count": 146, "kinds": {"milestone": 5, "sighting": 97, "kev": 17, "other": 27}}, "data": [{"timestamp": "2022-01-28T00:00:00Z", "date_only": false, "value": "2022-01-28T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-24112", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-11T00:00:00Z", "date_only": false, "value": "2022-02-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-02-11T12:20:13Z", "date_only": false, "value": "2022-02-11T12:20:13.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-24112", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-11T13:15:00Z", "date_only": false, "value": "2022-02-11T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2VC7-6W39-6RH2", "record": "GHSA-2VC7-6W39-6RH2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-11T13:15:00Z", "date_only": false, "value": "2022-02-11T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-24112", "record": "GSD-2022-24112", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-11T13:15:08.073Z", "date_only": false, "value": "2022-02-11T13:15:08.073000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_release_date.data.4.date"}, {"timestamp": "2022-02-11T13:15:08.073Z", "date_only": false, "value": "2022-02-11T13:15:08.073", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24112", "record": "FKIE_CVE-2022-24112", "field": "published"}, {"timestamp": "2022-02-11T16:29:40Z", "date_only": false, "value": "2022-02-11T16:29:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/37298", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "4d12c1df-f4d3-41d5-92c6-e897442e0e26", "content": "\u203c CVE-2022-24112 \u203c\n\nAn attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different from the data panel, the impact is lower. But there is still a risk to bypass the IP restriction of Apache APISIX's data panel. There is a check in the batch-requests plugin which overrides the client IP with its real remote IP. But due to a bug in the code, this check can be bypassed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/37298"}, {"timestamp": "2022-02-12T00:00:48Z", "date_only": false, "value": "2022-02-12T00:00:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2VC7-6W39-6RH2", "record": "GHSA-2VC7-6W39-6RH2", "field": "published"}, {"timestamp": "2022-02-15T00:00:00Z", "date_only": true, "value": "2022-02-15", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-12799", "record": "CNVD-2022-12799", "field": "submitTime"}, {"timestamp": "2022-02-20T00:00:00Z", "date_only": false, "value": "2022-02-20T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-02-20T00:00:00Z", "date_only": true, "value": "2022-02-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-12799", "record": "CNVD-2022-12799", "field": "openTime"}, {"timestamp": "2022-02-21T00:00:00Z", "date_only": false, "value": "2022-02-21T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-02-21T11:58:04Z", "date_only": false, "value": "2022-02-21T11:58:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1516", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "7908be57-d8e8-49e1-8d74-beea6b66dce6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24112 check\nURL\uff1ahttps://github.com/shakeman8/CVE-2022-24112", "url": "https://t.me/GithubRedTeam/1516"}, {"timestamp": "2022-02-21T16:34:10Z", "date_only": false, "value": "2022-02-21T16:34:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1518", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "24e16e81-8d8b-44a5-96a1-9f35e923e46b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24112 check\nURL\uff1ahttps://github.com/coconut20/CVE-2022-21907", "url": "https://t.me/GithubRedTeam/1518"}, {"timestamp": "2022-02-21T17:32:25Z", "date_only": false, "value": "2022-02-21T17:32:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1519", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "22a80715-1611-459f-99dd-fe0989ec7b17", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24112 check\nURL\uff1ahttps://github.com/coconut20/CVE-2022-21907-RCE-POC", "url": "https://t.me/GithubRedTeam/1519"}, {"timestamp": "2022-02-22T14:13:33Z", "date_only": false, "value": "2022-02-22T14:13:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1522", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "e3f31200-4f32-40f7-af5f-55d84470ed06", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24112\uff1aApache APISIX apisix/batch-requests RCE\nURL\uff1ahttps://github.com/Mr-xn/CVE-2022-24112", "url": "https://t.me/GithubRedTeam/1522"}, {"timestamp": "2022-02-23T05:20:26Z", "date_only": false, "value": "2022-02-23T05:20:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1750", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "b8cbfcbd-e456-4e55-bcb2-898d2fd3e965", "content": "#exploit\n1. CVE-2022-25375:\nDemo exploit of RNDIS USB Gadget\nhttps://github.com/szymonh/rndis-co\n\n2. CVE-2022-24112:\nApache APISIX apisix/batch-requests RCE\nhttps://github.com/Mr-xn/CVE-2022-24112\n]-> https://github.com/shakeman8/CVE-2022-24112\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1750"}, {"timestamp": "2022-02-25T15:22:54Z", "date_only": false, "value": "2022-02-25T15:22:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1535", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "f7b3bbec-55fc-4b98-8e4e-31532f83172d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aApache APISIX batch-requests RCE(CVE-2022-24112)\nURL\uff1ahttps://github.com/Axx8/CVE-2022-24112", "url": "https://t.me/GithubRedTeam/1535"}, {"timestamp": "2022-03-07T15:23:16Z", "date_only": false, "value": "2022-03-07T15:23:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_apisix_api_default_token_rce.rb", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "441170fc-93ab-48a6-bf92-904e49d18264", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_apisix_api_default_token_rce.rb"}, {"timestamp": "2022-03-16T09:22:01Z", "date_only": false, "value": "2022-03-16T09:22:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1670", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "1319a511-92ed-49d3-8bbd-8d8406e3814f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aApache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit \nURL\uff1ahttps://github.com/M4xSec/Apache-APISIX-CVE-2022-24112", "url": "https://t.me/GithubRedTeam/1670"}, {"timestamp": "2022-03-16T12:07:41Z", "date_only": false, "value": "2022-03-16T12:07:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1807", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "438cfde7-dcc4-493d-abec-c418cc87704b", "content": "#CVE-2022\nApache APISIX Remote Code Execution (CVE-2022-24112) proof of concept exploit \n\nhttps://github.com/M4xSec/Apache-APISIX-CVE-2022-24112\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1807"}, {"timestamp": "2022-03-16T18:06:16Z", "date_only": false, "value": "2022-03-16T18:06:16.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2022-24112", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-17T00:00:00Z", "date_only": false, "value": "2022-03-17T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-03-17T13:01:21Z", "date_only": false, "value": "2022-03-17T13:01:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvin_club/5284", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "a30f3697-40ee-4715-904b-9a8789001420", "content": "https://github.com/cckuailong/reapoc/tree/main/2022/CVE-2022-24112/vultarget", "url": "https://t.me/arvin_club/5284"}, {"timestamp": "2022-03-21T11:00:33Z", "date_only": false, "value": "2022-03-21T11:00:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5645", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "b4f4fd91-4650-4274-adf9-b09cf8c89ea8", "content": "#exploit\n1. CVE-2022-24112:\nApache APISIX < 2.12.1 RCE and Docker Lab\nhttps://github.com/twseptian/cve-2022-24112\nhttps://github.com/Mr-xn/CVE-2022-24112\n]-> Check:\nhttps://github.com/shakeman8/CVE-2022-24112\n\n2. CVE-2022-0337:\nSystem environment variables leak on Google Chrome, Microsoft Edge and Opera\nhttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera", "url": "https://t.me/CyberSecurityTechnologies/5645"}, {"timestamp": "2022-04-28T12:00:22Z", "date_only": false, "value": "2022-04-28T12:00:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1420", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "f1127024-2840-4d36-ae02-328bb720e024", "content": "CVE-2022-24112\uff1aApache APISIX apisix/batch-requests RCE\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d batch-requests \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u043e\u0431\u0445\u043e\u0434 IP-\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f API Admin. \u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Apache APISIX \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (\u0441 \u043a\u043b\u044e\u0447\u043e\u043c API \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e) \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u043a\u043b\u044e\u0447 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d \u0438\u043b\u0438 \u043f\u043e\u0440\u0442 Admin API \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d \u043d\u0430 \u043f\u043e\u0440\u0442, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u0439 \u043e\u0442 \u043f\u043e\u0440\u0442\u0430 \u043f\u0430\u043d\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441\u043d\u0438\u0436\u0430\u0435\u0442\u0441\u044f. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0438\u0441\u043a \u043e\u0431\u043e\u0439\u0442\u0438 IP-\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u043d\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Apache APISIX \u0432\u0441\u0435 \u0435\u0449\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442. \u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 batch-requests \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 IP \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u0435\u0433\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 IP. \u041d\u043e \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435 \u044d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u043e\u0439\u0434\u0435\u043d\u0430.\n\nhttps://github.com/Mr-xn/CVE-2022-24112\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1420"}, {"timestamp": "2022-05-11T00:00:00Z", "date_only": false, "value": "2022-05-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-05-11T14:58:00Z", "date_only": false, "value": "2022-05-11T14:58Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-24112", "record": "GSD-2022-24112", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-19T13:57:03Z", "date_only": false, "value": "2022-05-19T13:57:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ShizoPrivacy/28", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "974f25b7-af8c-40d8-8fde-f1a1b8b64130", "content": "CVE-2022-24112(Apache APISIX RCE)\n\n\u041e\u0431\u0449\u0438\u0439 \u0431\u0430\u043b\u043b CVSS: 9.8(Security-Database Scoring CVSS v3)\n\u0414\u043e\u0441\u0442\u0443\u043f \u043a \u044d\u0442\u043e\u043c\u0443 API \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 LUA \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 script, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.x.\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u044f \u0432\u0435\u043d\u0434\u043e\u0440\u0430: 11.02.2022\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435: \u0441\u0441\u044b\u043b\u043a\u04301, \u0441\u0441\u044b\u043b\u043a\u04302\n\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u044e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 Ven3xy.\n\u0421\u043a\u0440\u0438\u043f\u0442 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0432 \u043e\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u0435\u0440\u0430\u0445.\n\u0415\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u0438\u0432 \u043a\u043e\u0433\u043e-\u043b\u0438\u0431\u043e \u0443\u0433\u043e\u043b\u043e\u0432\u043d\u043e \u043d\u0430\u043a\u0430\u0437\u0443\u0435\u043c\u043e.\n\nTotal CVS Score: 9.8(Security-Database Scoring CSS v3)\nAccess to this API allows you to remotely execute LUA code using the script parameter added in version 2.x.\nFirst vendor publication: 2022.02.11\nFor more information: link 1, link 2\nI'm applying an exploit written by Ven3xy.\nThe script is provided in introductory measures.\nIts use against anyone is criminally punishable.\n\n#cve #poc #exploit", "url": "https://t.me/ShizoPrivacy/28"}, {"timestamp": "2022-06-20T18:27:56Z", "date_only": false, "value": "2022-06-20T18:27:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/apache_apisix_cve_2022_24112", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "a5aa523c-7ad6-4f3c-80dd-654c43fc1e83", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/apache_apisix_cve_2022_24112"}, {"timestamp": "2022-06-25T14:45:39Z", "date_only": false, "value": "2022-06-25T14:45:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/zero_day_uz/46", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "714d809b-993f-4f71-ae64-3a1b20253e72", "content": "#CVE\n\n\nAbout  CVE-2022-24112 POC\n\n\n\nhttps://t.me/zero_day_uz", "url": "https://t.me/zero_day_uz/46"}, {"timestamp": "2022-07-04T05:01:41Z", "date_only": false, "value": "2022-07-04T05:01:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1901", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "4b7c0875-99c6-4213-9872-f7b0c367b4c6", "content": "Apache APISIX Remote Code Execution (CVE-2022-24112) Exploit\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d batch-requests \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0432 \u043e\u0431\u0445\u043e\u0434 IP-\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f API Admin. \u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Apache APISIX \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e (\u0441 \u043a\u043b\u044e\u0447\u043e\u043c API \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e) \u0443\u044f\u0437\u0432\u0438\u043c\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u043a\u043b\u044e\u0447 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d \u0438\u043b\u0438 \u043f\u043e\u0440\u0442 Admin API \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0435\u043d \u043d\u0430 \u043f\u043e\u0440\u0442, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u0439 \u043e\u0442 \u043f\u043e\u0440\u0442\u0430 \u043f\u0430\u043d\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441\u043d\u0438\u0436\u0430\u0435\u0442\u0441\u044f. \u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0438\u0441\u043a \u043e\u0431\u043e\u0439\u0442\u0438 IP-\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u043d\u0435\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 Apache APISIX \u0432\u0441\u0435 \u0435\u0449\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442. \u0412 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 batch-requests \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0435\u0440\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u0442 IP \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u0435\u0433\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 IP. \u041d\u043e \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u043a\u043e\u0434\u0435 \u044d\u0442\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u043e\u0439\u0434\u0435\u043d\u0430.\nhttps://github.com/M4xSec/Apache-APISIX-CVE-2022-24112\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1901"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-24112", "field": "timestamps.asserted_at", "uuid": "10fe4f02-1e85-465e-a14e-4d4a24deb1d6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-24112", "field": "timestamps.asserted_at", "uuid": "f7c0a864-98de-4335-9091-98515c4f6554", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24112", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-24112", "field": "evidence.0.details.added_date", "uuid": "f7c0a864-98de-4335-9091-98515c4f6554", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": true, "value": "2022-08-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-24112", "field": "evidence.0.details.date_added", "uuid": "10fe4f02-1e85-465e-a14e-4d4a24deb1d6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-24112", "field": "timestamps.first_seen_at", "uuid": "10fe4f02-1e85-465e-a14e-4d4a24deb1d6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-24112", "field": "timestamps.first_seen_at", "uuid": "f7c0a864-98de-4335-9091-98515c4f6554", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-24112", "field": "status.status_updated_at", "uuid": "10fe4f02-1e85-465e-a14e-4d4a24deb1d6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-24112", "field": "status.status_updated_at", "uuid": "f7c0a864-98de-4335-9091-98515c4f6554", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24112", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-09-15T00:00:00Z", "date_only": true, "value": "2022-09-15", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-24112", "field": "evidence.0.details.due_date", "uuid": "10fe4f02-1e85-465e-a14e-4d4a24deb1d6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-12-04T03:12:09Z", "date_only": false, "value": "2022-12-04T03:12:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3518", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "93054236-86bb-41d1-bcc6-2131ebf37a6d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-24112_POC\nURL\uff1ahttps://github.com/Acczdy/CVE-2022-24112_POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3518"}, {"timestamp": "2022-12-18T11:13:39Z", "date_only": false, "value": "2022-12-18T11:13:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2528", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "b807493f-2101-4c7d-ad04-623fc45f4990", "content": "#CVE-2022\nwriteup and PoC for (CVE-2022-41082/CVE-2022-41040) aka ProxyNotShell\nhttps://github.com/Adynervi/CVE-2022-41082-RCE-PoC\n\n\nPython Exploit for CVE-2022-0739\nhttps://github.com/BKreisel/CVE-2022-0739\n\n\nAll details about CVE-2022-43097\n\nhttps://github.com/nibin-m/CVE-2022-43097\n\nCVE-2022-24112_POC\nhttps://github.com/Acczdy/CVE-2022-24112_POC\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2528"}, {"timestamp": "2023-06-05T00:00:00Z", "date_only": false, "value": "2023-06-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_release_date.data.3.date"}, {"timestamp": "2023-06-05T09:23:00Z", "date_only": false, "value": "2023-06-05T09:23:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "8ed9b8a4-2739-46b3-84a1-6d3c57b0a724"}, {"timestamp": "2023-10-14T14:57:27Z", "date_only": false, "value": "2023-10-14T14:57:27+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-24112", "field": "timestamps.asserted_at", "uuid": "178b5c56-8b58-4fb5-9c09-66a38158febd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:27Z", "date_only": false, "value": "2023-10-14T14:57:27+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-24112", "field": "timestamps.first_seen_at", "uuid": "178b5c56-8b58-4fb5-9c09-66a38158febd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-05T02:42:55Z", "date_only": false, "value": "2023-12-05T02:42:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1371", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "c9c832b7-95c3-444c-b25a-d3e570a1f3a0", "content": "#ExploitObserverAlert\n\nCVE-2022-24112\n\nDESCRIPTION: Exploit Observer has 38 entries related to CVE-2022-24112. An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was changed or the port of Admin API was changed to a port different from the data panel, the impact is lower. But there is still a risk to bypass the IP restriction of Apache APISIX's data panel. There is a check in the batch-requests plugin which overrides the client IP with its real remote IP. But due to a bug in the code, this check can be bypassed.\n\nFIRST-EPSS: 0.971990000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1371"}, {"timestamp": "2023-12-13T01:19:43.589Z", "date_only": false, "value": "2023-12-13T01:19:43.589800Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-24112", "record": "GSD-2022-24112", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:51:05.969Z", "date_only": false, "value": "2024-03-06T10:51:05.969Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-APISIX-2022-24112", "record": "BIT-APISIX-2022-24112", "field": "published"}, {"timestamp": "2024-06-03T17:38:36Z", "date_only": false, "value": "2024-06-03T17:38:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7508", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "1d8b897a-790d-4532-9aa2-1e7c8ae99090", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aNew exploit for Apache APISIX 2.12.1 - Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/btar1gan/exploit_CVE-2022-24112\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/7508"}, {"timestamp": "2024-08-03T03:59:23.660Z", "date_only": false, "value": "2024-08-03T03:59:23.660Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-24112", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:32:55.149Z", "date_only": false, "value": "2024-12-24T20:32:55.149334Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971695", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "3f45e65d-7989-4534-9c6a-732e0758b737", "url": "https://feedsin.space/feed/CISAKevBot/items/2971695"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "4884d582-0935-4b3c-a4e6-91e965c36d86"}, {"timestamp": "2025-01-29T21:21:39.557Z", "date_only": false, "value": "2025-01-29T21:21:39.557669Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24112", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T21:21:39.557Z", "date_only": false, "value": "2025-01-29T21:21:39.557669Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24112", "record": "FKIE_CVE-2022-24112", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-30T02:17:49Z", "date_only": false, "value": "2025-01-30T02:17:49.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/RYN9CVuVOnNpNcDATSMhKWBF9wkA0d53mwEFWbZ6_pEU263n", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "452e1dbf-3157-4d93-b7e4-7d0ea2656675"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "a8cec481-9503-4280-9b5d-a2c4a70a8694"}, {"timestamp": "2025-02-09T00:00:00Z", "date_only": false, "value": "2025-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-09)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "6a36ab3d-4a88-4ceb-a7d8-125f55ec2efd"}, {"timestamp": "2025-02-21T00:00:00Z", "date_only": false, "value": "2025-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-21)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "80561b5a-ad34-4813-b8ce-e60f06c32a51"}, {"timestamp": "2025-02-23T02:10:35Z", "date_only": false, "value": "2025-02-23T02:10:35.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "fbbe2802-12ac-4176-915b-9b22aa38be6e"}, {"timestamp": "2025-02-23T04:10:44Z", "date_only": false, "value": "2025-02-23T04:10:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "932e0e28-9274-4920-9a09-a47e56da8b50"}, {"timestamp": "2025-03-08T04:34:11Z", "date_only": false, "value": "2025-03-08T04:34:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/WN9NBuDiE6ufWr_wkMnrpCcXp-giw6BEDKj3qL7GVZYBJNCe", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "55dcbb71-f54c-404f-a78f-e01e327ccf29"}, {"timestamp": "2025-03-15T00:00:00Z", "date_only": false, "value": "2025-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-15)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "2ee78713-34e2-4282-93ee-f561bf848add"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "db7bdd94-74be-44de-828e-53e6da2ac399"}, {"timestamp": "2025-04-01T00:00:00Z", "date_only": false, "value": "2025-04-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-01)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "46e7eb07-a6f4-4d10-aca7-4b915a294aaf"}, {"timestamp": "2025-04-07T00:00:00Z", "date_only": false, "value": "2025-04-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-07)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "6a9e86e3-0826-42aa-945d-6f31097a9c97"}, {"timestamp": "2025-04-11T00:00:00Z", "date_only": false, "value": "2025-04-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-11)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "56e4f48f-f5a3-41a7-9407-6a6e422718a3"}, {"timestamp": "2025-05-10T00:00:00Z", "date_only": false, "value": "2025-05-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-10)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "0b0d855b-6713-4902-b7ef-9d843705ed5b"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "d6ebe6d9-39a9-4262-ac35-3998259a9ea4"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "90126e8e-eecc-47d8-9147-d9258b63648a"}, {"timestamp": "2025-05-30T00:00:00Z", "date_only": false, "value": "2025-05-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "1835c39c-8669-4f8c-87bc-9891f36e8db2"}, {"timestamp": "2025-06-24T00:00:00Z", "date_only": false, "value": "2025-06-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-24)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "165d8e27-0f3d-44fc-9dd7-91f6142cb8ae"}, {"timestamp": "2025-06-30T00:00:00Z", "date_only": false, "value": "2025-06-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-30)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "98a85475-0df9-48f7-a25b-ec7dcbe10f3e"}, {"timestamp": "2025-07-01T00:00:00Z", "date_only": false, "value": "2025-07-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-01)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "c8ab11fe-111e-4ee9-af03-b357bd87f39f"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "a442d79d-1cd0-4dae-bcb7-650ae9bfd6b0"}, {"timestamp": "2025-07-13T00:00:00Z", "date_only": false, "value": "2025-07-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "906741c4-2b9f-41cf-9df3-1c02a5120745"}, {"timestamp": "2025-09-02T00:00:00Z", "date_only": false, "value": "2025-09-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-02)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "50b0e257-9bab-46af-a0ce-293ae9a59b40"}, {"timestamp": "2025-09-20T00:00:00Z", "date_only": false, "value": "2025-09-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-20)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "805c5057-8b0d-4041-ac81-164327459cbb"}, {"timestamp": "2025-10-21T23:15:46.674Z", "date_only": false, "value": "2025-10-21T23:15:46.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-24112", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:46.674Z", "date_only": false, "value": "2025-10-21T23:15:46.674Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-24112", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:29Z", "date_only": false, "value": "2025-10-22T00:32:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2VC7-6W39-6RH2", "record": "GHSA-2VC7-6W39-6RH2", "field": "modified"}, {"timestamp": "2025-10-23T14:48:48.137Z", "date_only": false, "value": "2025-10-23T14:48:48.137000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "92cb22ef-0d62-4a0e-851b-64f91901af98"}, {"timestamp": "2025-11-18T15:14:20.270Z", "date_only": false, "value": "2025-11-18T15:14:20.270000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202202-0171", "record": "VAR-202202-0171", "field": "last_update_date"}, {"timestamp": "2025-11-28T00:00:00Z", "date_only": false, "value": "2025-11-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "d1a56e33-63e3-4045-8c72-389e1d082716"}, {"timestamp": "2025-12-05T00:00:00Z", "date_only": false, "value": "2025-12-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-05)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "18e72eca-a4fb-47db-bbce-a13a323beb53"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "50d798af-62c4-4368-9128-f7953ba2038c"}, {"timestamp": "2025-12-14T00:00:00Z", "date_only": false, "value": "2025-12-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-14)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "fd8f3144-c0f3-46b7-8acc-c5aa921f01f1"}, {"timestamp": "2025-12-20T00:00:00Z", "date_only": false, "value": "2025-12-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-20)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "7e106a97-2f98-46ba-9a31-047d97e6f4c8"}, {"timestamp": "2025-12-22T00:00:00Z", "date_only": false, "value": "2025-12-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-22)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "9941accc-9726-4c9d-8ddb-c8a10919a18a"}, {"timestamp": "2026-01-04T00:00:00Z", "date_only": false, "value": "2026-01-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-04)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "4a383cc9-fb0e-4326-8e56-d0746e2d6355"}, {"timestamp": "2026-01-05T00:00:00Z", "date_only": false, "value": "2026-01-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-05)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "5ad296a8-6092-4631-ad61-d052cdf711a2"}, {"timestamp": "2026-01-14T00:00:00Z", "date_only": false, "value": "2026-01-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-14)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "a4ada577-14e4-4a3f-ae7f-b040135cb70a"}, {"timestamp": "2026-01-21T00:00:00Z", "date_only": false, "value": "2026-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "c6888efa-1a64-48a4-9bd0-dbc57a0cbe12"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "84f41be0-5cda-46f1-ae0f-69f686e99a1c"}, {"timestamp": "2026-01-24T00:00:00Z", "date_only": false, "value": "2026-01-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-24)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "1867fbaf-108f-420f-a1e0-4a8495fb04d1"}, {"timestamp": "2026-02-02T12:27:15.045Z", "date_only": false, "value": "2026-02-02T12:27:15.045828Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b9b7247a-9ecf-45c0-bf89-cfeb3ea17477", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "04ce46ea-a191-410e-8e43-2984b1a67f3a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b9b7247a-9ecf-45c0-bf89-cfeb3ea17477"}, {"timestamp": "2026-02-02T12:27:15.045Z", "date_only": false, "value": "2026-02-02T12:27:15.045828Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b9b7247a-9ecf-45c0-bf89-cfeb3ea17477", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "cd568cc3-caea-4765-9ae2-68061a9a778c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b9b7247a-9ecf-45c0-bf89-cfeb3ea17477"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-24112", "field": "timestamps.recorded_at", "uuid": "10fe4f02-1e85-465e-a14e-4d4a24deb1d6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-08T00:00:00Z", "date_only": false, "value": "2026-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "9b0f0043-b376-4549-b649-c5d7bf5d4c93"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "6ae3e18b-79f7-42c6-bf4c-d13cbc2d28ff"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "617e7ba1-078c-4de5-a6f7-8735920f309b"}, {"timestamp": "2026-03-31T00:00:00Z", "date_only": false, "value": "2026-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "624b9ed9-d83b-46ad-8ec9-70223d0c464a"}, {"timestamp": "2026-06-17T04:31:18.883Z", "date_only": false, "value": "2026-06-17T04:31:18.883", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-24112", "record": "FKIE_CVE-2022-24112", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:05.781Z", "date_only": false, "value": "2026-06-19T12:47:05.781622Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a94ef2be-52bf-4e37-98a6-be6494bbc227", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "eb4f259b-e856-4b33-8271-065e5e3af7e9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a94ef2be-52bf-4e37-98a6-be6494bbc227"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-24112", "field": "timestamps.recorded_at", "uuid": "f7c0a864-98de-4335-9091-98515c4f6554", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:59.838Z", "date_only": false, "value": "2026-06-23T11:13:59.838278Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f7c0a864-98de-4335-9091-98515c4f6554", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "8c065bac-344d-4fb7-b707-fe1b86929235", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f7c0a864-98de-4335-9091-98515c4f6554"}, {"timestamp": "2026-06-23T14:05:32.036Z", "date_only": false, "value": "2026-06-23T14:05:32.036992Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85c098e1-3dbd-4386-ad15-0b4dc0f2f6c6", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "092b62db-6528-4991-b78a-ccfce01a131f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85c098e1-3dbd-4386-ad15-0b4dc0f2f6c6"}, {"timestamp": "2026-06-30T09:22:53.228Z", "date_only": false, "value": "2026-06-30T09:22:53.228372Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b8c93f34-0989-4b09-b36a-c3ca9bf4962b", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "0eb562ee-7547-4c82-b744-901e866917f9", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b8c93f34-0989-4b09-b36a-c3ca9bf4962b"}, {"timestamp": "2026-07-01T05:54:34.474Z", "date_only": false, "value": "2026-07-01T05:54:34.474865Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/178b5c56-8b58-4fb5-9c09-66a38158febd", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "8607c174-9601-4119-b6ce-217c287aaaf9", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/178b5c56-8b58-4fb5-9c09-66a38158febd"}, {"timestamp": "2026-07-17T05:00:09.055Z", "date_only": false, "value": "2026-07-17T05:00:09.055584Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/55", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "96493691-6798-424e-8573-2f5fdc2594ae", "url": "https://t.me/EchelonEyes/55"}, {"timestamp": "2026-07-18T01:00:20.956Z", "date_only": false, "value": "2026-07-18T01:00:20.956415Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/55", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "50e67f83-3582-4902-8c60-cd7adb1bcf9b", "url": "https://t.me/EchelonEyes/55"}, {"timestamp": "2026-07-26T02:02:42.216Z", "date_only": false, "value": "2026-07-26T02:02:42.216396Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "dec605c5-acb1-4ca0-8a7f-d2c7582fdd03", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-27T00:01:17.950Z", "date_only": false, "value": "2026-07-27T00:01:17.950071Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "c4296a07-2f4a-4db2-aa33-6c7079492044", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-28T09:00:07.136Z", "date_only": false, "value": "2026-07-28T09:00:07.136859Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "cd268646-824e-4337-b542-a683ded43bab", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-29T00:00:41.258Z", "date_only": false, "value": "2026-07-29T00:00:41.258706Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/615", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "8dbefb8a-90ef-402c-9f7d-a6129d680501", "url": "https://t.me/EchelonEyes/615"}, {"timestamp": "2026-07-29T12:00:45.397Z", "date_only": false, "value": "2026-07-29T12:00:45.397427Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9156", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "f85c056d-5343-426c-a929-7af8ad8bfb44", "url": "https://t.me/CVEhub/9156"}, {"timestamp": "2026-07-29T12:00:53.517Z", "date_only": false, "value": "2026-07-29T12:00:53.517646Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5468", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "0d942227-a30b-41b7-9583-8c691183504d", "url": "https://t.me/CVEhub/5468"}, {"timestamp": "2026-07-29T12:02:44.863Z", "date_only": false, "value": "2026-07-29T12:02:44.863427Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2177", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "2304cb6b-411a-4f13-8c07-c6ad5710db67", "url": "https://t.me/reverseame/2177"}, {"timestamp": "2026-07-29T12:02:45.448Z", "date_only": false, "value": "2026-07-29T12:02:45.448743Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2128", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "79c5faa3-13f4-4b32-9618-c8d4a496810e", "url": "https://t.me/reverseame/2128"}, {"timestamp": "2026-07-30T00:01:15.882Z", "date_only": false, "value": "2026-07-30T00:01:15.882772Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/9156", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "41bcc4b6-e921-436e-a09c-5dc86ee073a7", "url": "https://t.me/CVEhub/9156"}, {"timestamp": "2026-07-30T00:01:31.389Z", "date_only": false, "value": "2026-07-30T00:01:31.389204Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5468", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "c1d32a9c-5ea2-48e8-b903-4ad980f0d7cd", "url": "https://t.me/CVEhub/5468"}, {"timestamp": "2026-07-30T00:02:38.953Z", "date_only": false, "value": "2026-07-30T00:02:38.953247Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2177", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "40f44135-77c2-401a-9bd7-3ea2f1c178f7", "url": "https://t.me/reverseame/2177"}, {"timestamp": "2026-07-30T00:02:39.240Z", "date_only": false, "value": "2026-07-30T00:02:39.240931Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2128", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "794fc281-0b87-4a28-a5a4-df7cc63def9b", "url": "https://t.me/reverseame/2128"}, {"timestamp": "2026-07-31T13:00:05.646Z", "date_only": false, "value": "2026-07-31T13:00:05.646262Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9156", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "21becd6b-ec6d-4dc9-b6d7-cda16e45d901", "url": "https://t.me/CVEhub/9156"}, {"timestamp": "2026-07-31T20:00:03.985Z", "date_only": false, "value": "2026-07-31T20:00:03.985981Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5468", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "ebab818b-6a0b-47de-8f4a-fab61566fa5b", "url": "https://t.me/CVEhub/5468"}, {"timestamp": "2026-08-01T00:00:24.038Z", "date_only": false, "value": "2026-08-01T00:00:24.038587Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5468", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "9850a25f-dedf-4248-ad32-d22ddd46f842", "url": "https://t.me/CVEhub/5468"}, {"timestamp": "2026-08-01T00:00:33.315Z", "date_only": false, "value": "2026-08-01T00:00:33.315625Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/9156", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "153369bf-5ba6-40a9-ba5c-f19287deb886", "url": "https://t.me/CVEhub/9156"}, {"timestamp": "2026-08-03T02:13:40.647Z", "date_only": false, "value": "2026-08-03T02:13:40.647243Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2177", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "572abfbc-9dbd-456d-a100-f64d15b31b10", "url": "https://t.me/reverseame/2177"}, {"timestamp": "2026-08-03T03:11:03.696Z", "date_only": false, "value": "2026-08-03T03:11:03.696700Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2128", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "61331835-8be7-4c93-92da-5a98f35bde10", "url": "https://t.me/reverseame/2128"}, {"timestamp": "2026-08-04T00:00:53.414Z", "date_only": false, "value": "2026-08-04T00:00:53.414440Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2128", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "521ebe72-222d-45a8-b2d5-806b1c4e6f66", "url": "https://t.me/reverseame/2128"}, {"timestamp": "2026-08-04T00:00:53.770Z", "date_only": false, "value": "2026-08-04T00:00:53.770964Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2177", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "d9f4d386-2e39-4434-b2f8-2c7e5f94254e", "url": "https://t.me/reverseame/2177"}, {"timestamp": "2026-08-29T10:15:21.850Z", "date_only": false, "value": "2026-08-29T10:15:21.850381Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "b25717db-90de-4dc6-90a0-28908c477475"}, {"timestamp": "2026-09-01T20:01:50.887Z", "date_only": false, "value": "2026-09-01T20:01:50.887009Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/46566", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "4152aea4-982e-4930-90ad-d29de5758323", "url": "https://t.me/hacking_Attack/46566"}, {"timestamp": "2026-09-02T10:15:11.186Z", "date_only": false, "value": "2026-09-02T10:15:11.186650Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "6e9ce061-8afb-4bb8-a9df-b48e8f42e73b"}, {"timestamp": "2026-09-06T05:00:07.723Z", "date_only": false, "value": "2026-09-06T05:00:07.723840Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/46566", "record": "CVE-2022-24112", "field": "creation_timestamp", "uuid": "057650ee-6ea8-46cf-843d-cd2b662c3e8c", "url": "https://t.me/hacking_Attack/46566"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-APISIX-2022-24112", "record": "BIT-APISIX-2022-24112", "field": "modified"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-24112", "field": "timestamps.last_seen_at", "uuid": "178b5c56-8b58-4fb5-9c09-66a38158febd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-24112", "field": "evidence.0.details.observation_date", "uuid": "178b5c56-8b58-4fb5-9c09-66a38158febd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-24112", "field": "status.status_updated_at", "uuid": "178b5c56-8b58-4fb5-9c09-66a38158febd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T01:00:01Z", "date_only": false, "value": "2026-10-29T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-24112", "field": "timestamps.recorded_at", "uuid": "178b5c56-8b58-4fb5-9c09-66a38158febd", "status": {"status_reason": "confirmed", "exploited": true}}]}