{"metadata": {"vulnerability": "CVE-2022-4185", "count": 51, "kinds": {"milestone": 11, "sighting": 1, "kev": 0, "other": 39}}, "data": [{"timestamp": "2022-11-07T17:22:16Z", "date_only": false, "value": "2022-11-07T17:22:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/137803", "record": "CVE-2022-4185", "field": "creation_timestamp", "uuid": "a9a581cb-9164-4a4e-856d-64b385f712ad", "content": "{\n  \"Source\": \"https://t.me/documentors\",\n  \"Content\": \"CVE-2022-4185.zip 6.1 kB \ud83d\udca5Apache Commons JXPath RCE (CVE-2022-41852) People who use JXPath to interpret untrusted XPath expressions may be vulnerable to RCE attacks. All JXPathContext class functions that deal with XPath strings are vulnerable, except the compile() and compilePath() functions. An attacker can use an XPath expression to load any Java class from the classpath, resulting in code execution. To load remote configuration to achieve RCE we can use two class constructors in spring: org.springframework.context.support.ClassPathXmlApplicationContext org.springframework.context.support.FileSystemXmlApplicationContext \ud83d\udcbeAnother analysis + PoC\", \n  \"author\": \"\u2693\ufe0f\ud835\udd07\ud835\udd2c\ud835\udd20\ud835\udd32\ud835\udd2a\ud835\udd22\ud835\udd2b\ud835\udd31\ud835\udd2c\ud835\udd2f\",\n  \"Detection Date\": \"07 Nov 2022\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/137803"}, {"timestamp": "2022-11-29T00:00:00Z", "date_only": false, "value": "2022-11-29T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-4185", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-11-29T00:00:00Z", "date_only": false, "value": "2022-11-29T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-4185", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-29T23:00:00Z", "date_only": false, "value": "2022-11-29T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-11-29T23:00:00Z", "date_only": false, "value": "2022-11-29T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-11-29T23:00:00Z", "date_only": false, "value": "2022-11-29T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-11-30T00:00:00Z", "date_only": false, "value": "2022-11-30T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1065", "record": "CERTFR-2022-AVI-1065", "field": "last_revision_date"}, {"timestamp": "2022-11-30T00:00:00Z", "date_only": false, "value": "2022-11-30T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1065", "record": "CERTFR-2022-AVI-1065", "field": "initial_release_date"}, {"timestamp": "2022-11-30T00:00:00Z", "date_only": false, "value": "2022-11-30T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1065", "record": "CERTFR-2022-AVI-1065", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-30T00:00:00Z", "date_only": true, "value": "2022-11-30", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-08277", "record": "CNVD-2023-08277", "field": "submitTime"}, {"timestamp": "2022-11-30T00:15:00Z", "date_only": false, "value": "2022-11-30T00:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W75X-46M5-2F8X", "record": "GHSA-W75X-46M5-2F8X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-30T00:15:00Z", "date_only": false, "value": "2022-11-30T00:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-4185", "record": "UBUNTU-CVE-2022-4185", "field": "published"}, {"timestamp": "2022-11-30T00:15:00Z", "date_only": false, "value": "2022-11-30T00:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-4185", "record": "GSD-2022-4185", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-30T00:15:10.570Z", "date_only": false, "value": "2022-11-30T00:15:10.570", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-4185", "record": "FKIE_CVE-2022-4185", "field": "published"}, {"timestamp": "2022-11-30T00:30:36Z", "date_only": false, "value": "2022-11-30T00:30:36Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W75X-46M5-2F8X", "record": "GHSA-W75X-46M5-2F8X", "field": "published"}, {"timestamp": "2022-12-02T00:30:24Z", "date_only": false, "value": "2022-12-02T00:30:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W75X-46M5-2F8X", "record": "GHSA-W75X-46M5-2F8X", "field": "modified"}, {"timestamp": "2022-12-04T08:34:21Z", "date_only": false, "value": "2022-12-04T08:34:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10229-1", "record": "OPENSUSE-SU-2022:10229-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-04T08:34:21Z", "date_only": false, "value": "2022-12-04T08:34:21Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10229-1", "record": "OPENSUSE-SU-2022:10229-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2022-12-04T08:34:21Z", "date_only": false, "value": "2022-12-04T08:34:21Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10229-1", "record": "OPENSUSE-SU-2022:10229-1", "field": "document.tracking.generator.date"}, {"timestamp": "2022-12-04T08:34:21Z", "date_only": false, "value": "2022-12-04T08:34:21Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10229-1", "record": "OPENSUSE-SU-2022:10229-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-04T23:00:00Z", "date_only": false, "value": "2022-12-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-12-06T00:00:00Z", "date_only": false, "value": "2022-12-06T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1079", "record": "CERTFR-2022-AVI-1079", "field": "last_revision_date"}, {"timestamp": "2022-12-06T00:00:00Z", "date_only": false, "value": "2022-12-06T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1079", "record": "CERTFR-2022-AVI-1079", "field": "initial_release_date"}, {"timestamp": "2022-12-06T00:00:00Z", "date_only": false, "value": "2022-12-06T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1079", "record": "CERTFR-2022-AVI-1079", "field": "revisions.0.revision_date"}, {"timestamp": "2023-02-13T00:00:00Z", "date_only": true, "value": "2023-02-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-08277", "record": "CNVD-2023-08277", "field": "openTime"}, {"timestamp": "2023-08-06T22:00:00Z", "date_only": false, "value": "2023-08-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-11-25T11:06:14.859Z", "date_only": false, "value": "2023-11-25T11:06:14.859Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2022-4185", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-25T11:15:00Z", "date_only": false, "value": "2023-11-25T11:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-4185", "record": "GSD-2022-4185", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-26T23:00:00Z", "date_only": false, "value": "2023-11-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-12-13T01:19:15.859Z", "date_only": false, "value": "2023-12-13T01:19:15.859186Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-4185", "record": "GSD-2022-4185", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-21T23:00:00Z", "date_only": false, "value": "2023-12-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-12-21T23:00:00Z", "date_only": false, "value": "2023-12-21T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12545-1", "record": "OPENSUSE-SU-2024:12545-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12545-1", "record": "OPENSUSE-SU-2024:12545-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12545-1", "record": "OPENSUSE-SU-2024:12545-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12545-1", "record": "OPENSUSE-SU-2024:12545-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-03T01:34:49.304Z", "date_only": false, "value": "2024-08-03T01:34:49.304Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-4185", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T01:34:49.304Z", "date_only": false, "value": "2024-08-03T01:34:49.304Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-4185", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:39:01.437Z", "date_only": false, "value": "2024-08-15T17:39:01.437+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2202", "record": "WID-SEC-W-2022-2202", "field": "document.tracking.generator.date"}, {"timestamp": "2025-09-08T16:49:51Z", "date_only": false, "value": "2025-09-08T16:49:51Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-4185", "record": "UBUNTU-CVE-2022-4185", "field": "modified"}, {"timestamp": "2026-06-17T05:20:11.717Z", "date_only": false, "value": "2026-06-17T05:20:11.717", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-4185", "record": "FKIE_CVE-2022-4185", "field": "lastModified"}, {"timestamp": "2026-09-20T19:43:37Z", "date_only": false, "value": "2026-09-20T19:43:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10229-1", "record": "OPENSUSE-SU-2022:10229-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:43:37Z", "date_only": false, "value": "2026-09-20T19:43:37Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2022:10229-1", "record": "OPENSUSE-SU-2022:10229-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:41:00Z", "date_only": false, "value": "2026-09-20T20:41:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12545-1", "record": "OPENSUSE-SU-2024:12545-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:41:00Z", "date_only": false, "value": "2026-09-20T20:41:00Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12545-1", "record": "OPENSUSE-SU-2024:12545-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:50:05Z", "date_only": false, "value": "2026-09-20T20:50:05Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:50:05Z", "date_only": false, "value": "2026-09-20T20:50:05Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12948-1", "record": "OPENSUSE-SU-2024:12948-1", "field": "document.tracking.current_release_date"}]}