{"metadata": {"vulnerability": "CVE-2022-26612", "count": 54, "kinds": {"milestone": 17, "sighting": 3, "kev": 0, "other": 34}}, "data": [{"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2022-02-17T00:00:00Z", "date_only": false, "value": "2022-02-17T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2022-02-21T00:00:00Z", "date_only": false, "value": "2022-02-21T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2022-02-24T00:00:00Z", "date_only": false, "value": "2022-02-24T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.timeline.3.time"}, {"timestamp": "2022-03-07T00:00:00Z", "date_only": false, "value": "2022-03-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-26612", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.timeline.4.time"}, {"timestamp": "2022-03-10T00:00:00Z", "date_only": false, "value": "2022-03-10T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.timeline.5.time"}, {"timestamp": "2022-04-01T00:00:00Z", "date_only": false, "value": "2022-04-01T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.timeline.6.time"}, {"timestamp": "2022-04-07T00:00:00Z", "date_only": true, "value": "2022-04-07", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-26612", "record": "GSD-2022-26612", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-04-07T00:00:00Z", "date_only": false, "value": "2022-04-07T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.timeline.7.time"}, {"timestamp": "2022-04-07T18:20:12Z", "date_only": false, "value": "2022-04-07T18:20:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-26612", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-04-07T19:15:00Z", "date_only": false, "value": "2022-04-07T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GX2C-FVHC-PH4J", "record": "GHSA-GX2C-FVHC-PH4J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-04-07T19:15:00Z", "date_only": false, "value": "2022-04-07T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26612", "record": "GSD-2022-26612", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-04-07T19:15:08.917Z", "date_only": false, "value": "2022-04-07T19:15:08.917", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26612", "record": "FKIE_CVE-2022-26612", "field": "published"}, {"timestamp": "2022-04-08T00:00:21Z", "date_only": false, "value": "2022-04-08T00:00:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GX2C-FVHC-PH4J", "record": "GHSA-GX2C-FVHC-PH4J", "field": "published"}, {"timestamp": "2022-04-11T00:00:00Z", "date_only": true, "value": "2022-04-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-38527", "record": "CNVD-2022-38527", "field": "submitTime"}, {"timestamp": "2022-04-22T11:01:07Z", "date_only": false, "value": "2022-04-22T11:01:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5862", "record": "CVE-2022-26612", "field": "creation_timestamp", "uuid": "4d39e999-016b-4a5c-aab0-ffb13d6edb04", "content": "#Threat_Research\n1. SSRF Attack Examples and Mitigations\nhttps://goteleport.com/blog/ssrf-attacks\n2. Arbitrary file write during TAR extraction in Apache Hadoop (CVE-2022-26612)\nhttps://securitylab.github.com/advisories/GHSL-2022-012_Apache_Hadoop", "url": "https://t.me/CyberSecurityTechnologies/5862"}, {"timestamp": "2022-05-19T00:00:00Z", "date_only": true, "value": "2022-05-19", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-38527", "record": "CNVD-2022-38527", "field": "openTime"}, {"timestamp": "2022-05-19T19:06:26Z", "date_only": false, "value": "2022-05-19T19:06:26.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2022-26612", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-09-09T16:52:00Z", "date_only": false, "value": "2022-09-09T16:52Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26612", "record": "GSD-2022-26612", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-11-11T11:05:24Z", "date_only": false, "value": "2022-11-11T11:05:24Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2022-2092", "record": "OESA-2022-2092", "field": "published"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": true, "value": "2023-08-08", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-26612", "record": "GSD-2022-26612", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-12-13T01:19:38.944Z", "date_only": false, "value": "2023-12-13T01:19:38.944417Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26612", "record": "GSD-2022-26612", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-28T01:02:45Z", "date_only": false, "value": "2024-01-28T01:02:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3143", "record": "CVE-2022-26612", "field": "creation_timestamp", "uuid": "128ca288-f025-49f8-9774-3d70e4ecc868", "content": "#ExploitObserverAlert\n\nCVE-2022-26612\n\nDESCRIPTION: Exploit Observer has 4 entries in 3 file formats related to CVE-2022-26612. In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn't resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3\n\nFIRST-EPSS: 0.015140000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/3143"}, {"timestamp": "2024-04-04T22:00:00Z", "date_only": false, "value": "2024-04-04T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-04T22:00:00Z", "date_only": false, "value": "2024-04-04T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-04T22:00:00Z", "date_only": false, "value": "2024-04-04T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-03T05:11:43.529Z", "date_only": false, "value": "2024-08-03T05:11:43.529Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-26612", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T05:11:43.529Z", "date_only": false, "value": "2024-08-03T05:11:43.529Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-26612", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-27T23:00:00Z", "date_only": false, "value": "2024-11-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": true, "value": "2025-06-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0512", "record": "CERTFR-2025-AVI-0512", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": true, "value": "2025-06-12", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0512", "record": "CERTFR-2025-AVI-0512", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0512", "record": "CERTFR-2025-AVI-0512", "field": "last_revision_date"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0512", "record": "CERTFR-2025-AVI-0512", "field": "initial_release_date"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0512", "record": "CERTFR-2025-AVI-0512", "field": "revisions.0.revision_date"}, {"timestamp": "2025-10-01T14:24:45Z", "date_only": false, "value": "2025-10-01T14:24:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GX2C-FVHC-PH4J", "record": "GHSA-GX2C-FVHC-PH4J", "field": "modified"}, {"timestamp": "2026-01-22T23:00:00Z", "date_only": false, "value": "2026-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-01-22T23:00:00Z", "date_only": false, "value": "2026-01-22T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-23T08:51:02.418Z", "date_only": false, "value": "2026-01-23T08:51:02.418+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0794", "record": "WID-SEC-W-2024-0794", "field": "document.tracking.generator.date"}, {"timestamp": "2026-05-06T00:00:00Z", "date_only": true, "value": "2026-05-06", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2026-05-07T00:00:00Z", "date_only": true, "value": "2026-05-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-08T00:00:00Z", "date_only": true, "value": "2026-05-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "last_revision_date"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "initial_release_date"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0556", "record": "CERTFR-2026-AVI-0556", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-12T19:54:24Z", "date_only": false, "value": "2026-06-12T19:54:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/gfussNET/873e9e64a9664e3b146176c7102074b0", "record": "CVE-2022-26612", "field": "creation_timestamp", "uuid": "2898b5b8-abcf-424c-bf16-aae78a7b36af", "url": "https://gist.github.com/gfussNET/873e9e64a9664e3b146176c7102074b0"}, {"timestamp": "2026-06-17T04:35:32.083Z", "date_only": false, "value": "2026-06-17T04:35:32.083", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26612", "record": "FKIE_CVE-2022-26612", "field": "lastModified"}, {"timestamp": "2026-08-06T11:05:24Z", "date_only": false, "value": "2026-08-06T11:05:24Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2022-2092", "record": "OESA-2022-2092", "field": "modified"}, {"timestamp": "2026-09-07T00:00:00Z", "date_only": true, "value": "2026-09-07", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-09-09T00:00:00Z", "date_only": true, "value": "2026-09-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-09-10T00:00:00Z", "date_only": true, "value": "2026-09-10", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "last_revision_date"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": true, "value": "2026-09-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "vendor_advisories.8.published_at"}, {"timestamp": "2026-09-11T00:00:00Z", "date_only": false, "value": "2026-09-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1165", "record": "CERTFR-2026-AVI-1165", "field": "revisions.0.revision_date"}]}