{"metadata": {"vulnerability": "CVE-2023-21285", "count": 35, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 25}}, "data": [{"timestamp": "2022-11-03T22:37:50.655Z", "date_only": false, "value": "2022-11-03T22:37:50.655Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-21285", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-07T22:00:00Z", "date_only": false, "value": "2023-08-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1981", "record": "WID-SEC-W-2023-1981", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-07T22:00:00Z", "date_only": false, "value": "2023-08-07T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1984", "record": "WID-SEC-W-2023-1984", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-07T22:00:00Z", "date_only": false, "value": "2023-08-07T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1981", "record": "WID-SEC-W-2023-1981", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-07T22:00:00Z", "date_only": false, "value": "2023-08-07T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1984", "record": "WID-SEC-W-2023-1984", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-07T22:00:00Z", "date_only": false, "value": "2023-08-07T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1981", "record": "WID-SEC-W-2023-1981", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-07T22:00:00Z", "date_only": false, "value": "2023-08-07T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1984", "record": "WID-SEC-W-2023-1984", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-07T22:00:00Z", "date_only": false, "value": "2023-08-07T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1981", "record": "WID-SEC-W-2023-1981", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0629", "record": "CERTFR-2023-AVI-0629", "field": "last_revision_date"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0629", "record": "CERTFR-2023-AVI-0629", "field": "initial_release_date"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": false, "value": "2023-08-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0629", "record": "CERTFR-2023-AVI-0629", "field": "revisions.0.revision_date"}, {"timestamp": "2023-08-14T21:06:23.871Z", "date_only": false, "value": "2023-08-14T21:06:23.871Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-21285", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-08-14T21:06:23.871Z", "date_only": false, "value": "2023-08-14T21:06:23.871Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / google_android", "record": "CVE-2023-21285", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-08-14T22:15:00Z", "date_only": false, "value": "2023-08-14T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-21285", "record": "GSD-2023-21285", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-08-14T22:15:13Z", "date_only": false, "value": "2023-08-14T22:15:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-82H8-CVHJ-FH5F", "record": "GHSA-82H8-CVHJ-FH5F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-08-14T22:15:13.537Z", "date_only": false, "value": "2023-08-14T22:15:13.537", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21285", "record": "FKIE_CVE-2023-21285", "field": "published"}, {"timestamp": "2023-08-15T00:31:21Z", "date_only": false, "value": "2023-08-15T00:31:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-82H8-CVHJ-FH5F", "record": "GHSA-82H8-CVHJ-FH5F", "field": "published"}, {"timestamp": "2023-08-15T02:20:01Z", "date_only": false, "value": "2023-08-15T02:20:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/68514", "record": "CVE-2023-21285", "field": "creation_timestamp", "uuid": "96410953-01b0-46d5-b1b6-fd24e76c9f51", "content": "\u203c CVE-2023-21285 \u203c\n\nIn setMetadata of MediaSessionRecord.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/68514"}, {"timestamp": "2023-08-16T00:00:00Z", "date_only": true, "value": "2023-08-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-82069", "record": "CNVD-2023-82069", "field": "submitTime"}, {"timestamp": "2023-08-21T16:34:00Z", "date_only": false, "value": "2023-08-21T16:34Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-21285", "record": "GSD-2023-21285", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-09-19T22:00:00Z", "date_only": false, "value": "2023-09-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1984", "record": "WID-SEC-W-2023-1984", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-09-19T22:00:00Z", "date_only": false, "value": "2023-09-19T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1984", "record": "WID-SEC-W-2023-1984", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-10-31T00:00:00Z", "date_only": true, "value": "2023-10-31", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-82069", "record": "CNVD-2023-82069", "field": "openTime"}, {"timestamp": "2023-12-11T17:48:44Z", "date_only": false, "value": "2023-12-11T17:48:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9566", "record": "CVE-2023-21285", "field": "creation_timestamp", "uuid": "2f780ca3-7a75-4ebf-a85e-ee50f50d2303", "content": "#exploit\n1. CVE-2023-30547:\nVM2 Sandbox Escape Vulnerability\nhttps://github.com/rvizx/CVE-2023-30547\n\n2. CVE-2023-21285:\nAndroid MediaSessionRecord*java setMetadata information disclosure\nhttps://github.com/uthrasri/framework_base_CVE-2023-21285_NoPatch\n\n3. CVE-2021-34473:\nMicrosoft Exchange Server RCE\nhttps://github.com/kh4sh3i/ProxyShell", "url": "https://t.me/CyberSecurityTechnologies/9566"}, {"timestamp": "2023-12-13T01:20:25.376Z", "date_only": false, "value": "2023-12-13T01:20:25.376730Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-21285", "record": "GSD-2023-21285", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T06:57:08Z", "date_only": false, "value": "2024-04-04T06:57:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-82H8-CVHJ-FH5F", "record": "GHSA-82H8-CVHJ-FH5F", "field": "modified"}, {"timestamp": "2024-08-02T09:36:33.126Z", "date_only": false, "value": "2024-08-02T09:36:33.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-21285", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:56:39.395Z", "date_only": false, "value": "2024-08-15T17:56:39.395+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1981", "record": "WID-SEC-W-2023-1981", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-15T17:56:40.270Z", "date_only": false, "value": "2024-08-15T17:56:40.270+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1984", "record": "WID-SEC-W-2023-1984", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:56:11Z", "date_only": false, "value": "2024-08-16T08:56:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2244", "record": "CVE-2023-21285", "field": "creation_timestamp", "uuid": "bbb581d8-3156-4b41-89e9-0dd87fabca27", "content": "#Malware_analysis\n1. CVE-2023-30547:\nVM2 Sandbox Escape Vulnerability\nhttps://github.com/rvizx/CVE-2023-30547\n\n2. CVE-2023-21285:\nAndroid MediaSessionRecord*java setMetadata information disclosure\nhttps://github.com/uthrasri/framework_base_CVE-2023-21285_NoPatch", "url": "https://t.me/Rootsec_2/2244"}, {"timestamp": "2024-10-09T14:42:59.984Z", "date_only": false, "value": "2024-10-09T14:42:59.984428Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-21285", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-09T14:42:59.984Z", "date_only": false, "value": "2024-10-09T14:42:59.984428Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21285", "record": "FKIE_CVE-2023-21285", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-09T14:43:10.844Z", "date_only": false, "value": "2024-10-09T14:43:10.844Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-21285", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-09T14:43:10.844Z", "date_only": false, "value": "2024-10-09T14:43:10.844Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-21285", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:32:14.967Z", "date_only": false, "value": "2026-06-17T05:32:14.967", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-21285", "record": "FKIE_CVE-2023-21285", "field": "lastModified"}]}