{"metadata": {"vulnerability": "CVE-2022-39261", "count": 28, "kinds": {"milestone": 7, "sighting": 1, "kev": 0, "other": 20}}, "data": [{"timestamp": "2022-09-02T00:00:00Z", "date_only": false, "value": "2022-09-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-39261", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-09-28T00:00:00Z", "date_only": true, "value": "2022-09-28", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-39261", "record": "GSD-2022-39261", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-09-28T00:00:00Z", "date_only": false, "value": "2022-09-28T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-39261", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-09-28T14:15:00Z", "date_only": false, "value": "2022-09-28T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-52M2-VC4M-JJ33", "record": "GHSA-52M2-VC4M-JJ33", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-09-28T14:15:00Z", "date_only": false, "value": "2022-09-28T14:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-39261", "record": "UBUNTU-CVE-2022-39261", "field": "published"}, {"timestamp": "2022-09-28T14:15:00Z", "date_only": false, "value": "2022-09-28T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-39261", "record": "GSD-2022-39261", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-09-28T14:15:10.827Z", "date_only": false, "value": "2022-09-28T14:15:10.827", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39261", "record": "FKIE_CVE-2022-39261", "field": "published"}, {"timestamp": "2022-09-28T18:34:22Z", "date_only": false, "value": "2022-09-28T18:34:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/50591", "record": "CVE-2022-39261", "field": "creation_timestamp", "uuid": "ab5176e2-4a17-47af-89e8-c1f0ff866c99", "content": "\u203c CVE-2022-39261 \u203c\n\nTwig is a template language for PHP. Versions 1.x prior to 1.44.7, 2.x prior to 2.15.3, and 3.x prior to 3.4.3 encounter an issue when the filesystem loader loads templates for which the name is a user input. It is possible to use the `source` or `include` statement to read arbitrary files from outside the templates' directory when using a namespace like `@somewhere/../some.file`. In such a case, validation is bypassed. Versions 1.44.7, 2.15.3, and 3.4.3 contain a fix for validation of such template names. There are no known workarounds aside from upgrading.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/50591"}, {"timestamp": "2022-09-29T00:00:00Z", "date_only": false, "value": "2022-09-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-866", "record": "CERTFR-2022-AVI-866", "field": "last_revision_date"}, {"timestamp": "2022-09-29T00:00:00Z", "date_only": false, "value": "2022-09-29T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-866", "record": "CERTFR-2022-AVI-866", "field": "initial_release_date"}, {"timestamp": "2022-09-29T00:00:00Z", "date_only": false, "value": "2022-09-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-866", "record": "CERTFR-2022-AVI-866", "field": "revisions.0.revision_date"}, {"timestamp": "2022-09-30T00:00:00Z", "date_only": true, "value": "2022-09-30", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-88789", "record": "CNVD-2022-88789", "field": "submitTime"}, {"timestamp": "2022-09-30T05:29:36Z", "date_only": false, "value": "2022-09-30T05:29:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-52M2-VC4M-JJ33", "record": "GHSA-52M2-VC4M-JJ33", "field": "published"}, {"timestamp": "2022-09-30T05:29:36Z", "date_only": false, "value": "2022-09-30T05:29:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-52M2-VC4M-JJ33", "record": "GHSA-52M2-VC4M-JJ33", "field": "modified"}, {"timestamp": "2022-11-14T00:00:00Z", "date_only": false, "value": "2022-11-14T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2022-39261", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": true, "value": "2022-11-21", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-39261", "record": "GSD-2022-39261", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-11-21T15:26:00Z", "date_only": false, "value": "2022-11-21T15:26Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-39261", "record": "GSD-2022-39261", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-12-20T00:00:00Z", "date_only": true, "value": "2022-12-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-88789", "record": "CNVD-2022-88789", "field": "openTime"}, {"timestamp": "2023-12-13T01:19:20.700Z", "date_only": false, "value": "2023-12-13T01:19:20.700009Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-39261", "record": "GSD-2022-39261", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:51:53.277Z", "date_only": false, "value": "2024-03-06T10:51:53.277Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-DRUPAL-2022-39261", "record": "BIT-DRUPAL-2022-39261", "field": "published"}, {"timestamp": "2024-08-03T12:00:43.686Z", "date_only": false, "value": "2024-08-03T12:00:43.686Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-39261", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-23T15:50:56.522Z", "date_only": false, "value": "2025-04-23T15:50:56.522548Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-39261", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-23T15:50:56.522Z", "date_only": false, "value": "2025-04-23T15:50:56.522548Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39261", "record": "FKIE_CVE-2022-39261", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T16:54:59.321Z", "date_only": false, "value": "2025-04-23T16:54:59.321Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-39261", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T16:54:59.321Z", "date_only": false, "value": "2025-04-23T16:54:59.321Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-39261", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-24T04:53:50Z", "date_only": false, "value": "2025-10-24T04:53:50Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-39261", "record": "UBUNTU-CVE-2022-39261", "field": "modified"}, {"timestamp": "2026-06-17T04:58:01.430Z", "date_only": false, "value": "2026-06-17T04:58:01.430", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-39261", "record": "FKIE_CVE-2022-39261", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-DRUPAL-2022-39261", "record": "BIT-DRUPAL-2022-39261", "field": "modified"}]}