{"metadata": {"vulnerability": "CVE-2022-35411", "count": 21, "kinds": {"milestone": 6, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2022-07-08T00:00:00Z", "date_only": true, "value": "2022-07-08", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-35411", "record": "GSD-2022-35411", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-07-08T00:00:00Z", "date_only": false, "value": "2022-07-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-35411", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-08T18:07:40Z", "date_only": false, "value": "2022-07-08T18:07:40.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35411", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-07-08T19:15:00Z", "date_only": false, "value": "2022-07-08T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8RQ8-F485-7V8X", "record": "GHSA-8RQ8-F485-7V8X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-07-08T19:15:08.700Z", "date_only": false, "value": "2022-07-08T19:15:08.700", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35411", "record": "FKIE_CVE-2022-35411", "field": "published"}, {"timestamp": "2022-07-08T19:15:08.700Z", "date_only": false, "value": "2022-07-08T19:15:08.700", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2022-35411", "record": "GSD-2022-35411", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2022-07-08T22:18:36Z", "date_only": false, "value": "2022-07-08T22:18:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/45834", "record": "CVE-2022-35411", "field": "creation_timestamp", "uuid": "afaef02b-d327-4cb7-a196-053501a1f54f", "content": "\u203c CVE-2022-35411 \u203c\n\nrpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the \"serializer: pickle\" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the data to be processed with unpickle.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/45834"}, {"timestamp": "2022-07-09T00:00:19Z", "date_only": false, "value": "2022-07-09T00:00:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8RQ8-F485-7V8X", "record": "GHSA-8RQ8-F485-7V8X", "field": "published"}, {"timestamp": "2022-07-29T16:06:59Z", "date_only": false, "value": "2022-07-29T16:06:59.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-35411", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": true, "value": "2023-08-08", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-35411", "record": "GSD-2022-35411", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-12-13T01:19:33.429Z", "date_only": false, "value": "2023-12-13T01:19:33.429559Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-35411", "record": "GSD-2022-35411", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-09T03:16:18.977Z", "date_only": false, "value": "2024-02-09T03:16:18.977", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-35411", "record": "GSD-2022-35411", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-04-22T21:11:25Z", "date_only": false, "value": "2024-04-22T21:11:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8RQ8-F485-7V8X", "record": "GHSA-8RQ8-F485-7V8X", "field": "modified"}, {"timestamp": "2024-04-25T11:10:21Z", "date_only": false, "value": "2024-04-25T11:10:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/7168", "record": "CVE-2022-35411", "field": "creation_timestamp", "uuid": "6081b26f-1248-4d9b-9b86-60c1ffbcc724", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1arpc.py 0.6.0 - Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/fuzzlove/CVE-2022-35411\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/7168"}, {"timestamp": "2024-08-03T09:36:44.447Z", "date_only": false, "value": "2024-08-03T09:36:44.447Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-35411", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T09:36:44.447Z", "date_only": false, "value": "2024-08-03T09:36:44.447Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-35411", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-28T09:31:39Z", "date_only": false, "value": "2025-07-28T09:31:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45668", "record": "CVE-2022-35411", "field": "creation_timestamp", "uuid": "23353d9f-0322-4309-a27b-bfa633b3493e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aExploit for CVE-2022-35411 \u2014 Unauthenticated RCE in rpc.py (<= 0.6.0)\nURL\uff1ahttps://github.com/CSpanias/rpc-rce.py\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/45668"}, {"timestamp": "2025-07-28T15:00:06Z", "date_only": false, "value": "2025-07-28T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Fl_ltFZIbiQsMNPTYivk2KXEOFXqbKjLz4yAp3sglbIHJYU", "record": "CVE-2022-35411", "field": "creation_timestamp", "uuid": "5b8c41f6-321a-406a-b26a-0da9d12908fc"}, {"timestamp": "2026-06-17T04:51:47.433Z", "date_only": false, "value": "2026-06-17T04:51:47.433", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35411", "record": "FKIE_CVE-2022-35411", "field": "lastModified"}, {"timestamp": "2026-06-29T11:50:33.689Z", "date_only": false, "value": "2026-06-29T11:50:33.689769Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-526", "record": "PYSEC-2026-526", "field": "published"}, {"timestamp": "2026-07-01T20:23:04.195Z", "date_only": false, "value": "2026-07-01T20:23:04.195521Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-526", "record": "PYSEC-2026-526", "field": "modified"}]}