{"metadata": {"vulnerability": "CVE-2023-22462", "count": 57, "kinds": {"milestone": 10, "sighting": 1, "kev": 0, "other": 46}}, "data": [{"timestamp": "2022-11-30T00:00:00Z", "date_only": false, "value": "2022-11-30T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2022-12-21T00:00:00Z", "date_only": false, "value": "2022-12-21T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2022-12-29T03:00:40.879Z", "date_only": false, "value": "2022-12-29T03:00:40.879Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-22462", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-01-13T00:00:00Z", "date_only": false, "value": "2023-01-13T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2023-01-16T00:00:00Z", "date_only": false, "value": "2023-01-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2023-01-27T00:00:00Z", "date_only": false, "value": "2023-01-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2023-02-03T00:00:00Z", "date_only": false, "value": "2023-02-03T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-02-06T00:00:00Z", "date_only": false, "value": "2023-02-06T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-02-08T00:00:00Z", "date_only": false, "value": "2023-02-08T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2023-02-11T00:00:00Z", "date_only": false, "value": "2023-02-11T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.8.discovery_date"}, {"timestamp": "2023-02-14T16:20:00Z", "date_only": false, "value": "2023-02-14T16:20:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.8.release_date"}, {"timestamp": "2023-02-28T23:00:00Z", "date_only": false, "value": "2023-02-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-02-28T23:00:00Z", "date_only": false, "value": "2023-02-28T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-02-28T23:00:00Z", "date_only": false, "value": "2023-02-28T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": true, "value": "2023-03-01", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-22462", "record": "GSD-2023-22462", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0176", "record": "CERTFR-2023-AVI-0176", "field": "last_revision_date"}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": true, "value": "2023-03-01", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-22462", "record": "GSD-2023-22462", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0176", "record": "CERTFR-2023-AVI-0176", "field": "initial_release_date"}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2023-03-01T00:00:00Z", "date_only": false, "value": "2023-03-01T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0176", "record": "CERTFR-2023-AVI-0176", "field": "revisions.0.revision_date"}, {"timestamp": "2023-03-01T20:56:49Z", "date_only": false, "value": "2023-03-01T20:56:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7RQG-HJWC-6MJF", "record": "GHSA-7RQG-HJWC-6MJF", "field": "published"}, {"timestamp": "2023-03-02T00:00:00Z", "date_only": false, "value": "2023-03-02T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.6.release_date"}, {"timestamp": "2023-03-02T00:06:59.876Z", "date_only": false, "value": "2023-03-02T00:06:59.876Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-22462", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-03-02T01:15:00Z", "date_only": false, "value": "2023-03-02T01:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7RQG-HJWC-6MJF", "record": "GHSA-7RQG-HJWC-6MJF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-03-02T01:15:00Z", "date_only": false, "value": "2023-03-02T01:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-22462", "record": "UBUNTU-CVE-2023-22462", "field": "published"}, {"timestamp": "2023-03-02T01:15:11.727Z", "date_only": false, "value": "2023-03-02T01:15:11.727", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-22462", "record": "FKIE_CVE-2023-22462", "field": "published"}, {"timestamp": "2023-03-02T01:15:11.727Z", "date_only": false, "value": "2023-03-02T01:15:11.727", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-22462", "record": "GSD-2023-22462", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-03-02T07:34:15Z", "date_only": false, "value": "2023-03-02T07:34:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/59313", "record": "CVE-2023-22462", "field": "creation_timestamp", "uuid": "bf0ff86a-ef61-4b84-b8d4-d8ecaf3454f8", "content": "\u203c CVE-2023-22462 \u203c\n\nGrafana is an open-source platform for monitoring and observability. On 2023-01-01 during an internal audit of Grafana, a member of the security team found a stored XSS vulnerability affecting the core plugin \"Text\". The stored XSS vulnerability requires several user interactions in order to be fully exploited. The vulnerability was possible due to React's render cycle that will pass though the unsanitized HTML code, but in the next cycle the HTML is cleaned up and saved in Grafana's database. An attacker needs to have the Editor role in order to change a Text panel to include JavaScript. Another user needs to edit the same Text panel, and click on \"Markdown\" or \"HTML\" for the code to be executed. This means that vertical privilege escalation is possible, where a user with Editor role can change to a known password for a user having Admin role if the user with Admin role executes malicious JavaScript viewing a dashboard. This issue has been patched in versions 9.2.10 and 9.3.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/59313"}, {"timestamp": "2023-03-02T20:41:57Z", "date_only": false, "value": "2023-03-02T20:41:57Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7RQG-HJWC-6MJF", "record": "GHSA-7RQG-HJWC-6MJF", "field": "modified"}, {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.7.discovery_date"}, {"timestamp": "2023-04-04T00:00:00Z", "date_only": false, "value": "2023-04-04T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.7.release_date"}, {"timestamp": "2023-04-12T00:00:00Z", "date_only": false, "value": "2023-04-12T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2023-04-12T00:00:00Z", "date_only": false, "value": "2023-04-12T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.5.release_date"}, {"timestamp": "2023-04-13T16:06:22.978Z", "date_only": false, "value": "2023-04-13T16:06:22.978Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-22462", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-18T22:00:00Z", "date_only": false, "value": "2023-04-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-03T22:00:00Z", "date_only": false, "value": "2023-10-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-12-13T01:20:42.947Z", "date_only": false, "value": "2023-12-13T01:20:42.947443Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-22462", "record": "GSD-2023-22462", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-23T23:00:00Z", "date_only": false, "value": "2024-01-23T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-02-01T17:08:54.787Z", "date_only": false, "value": "2024-02-01T17:08:54.787", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-22462", "record": "GSD-2023-22462", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-08T16:49:55Z", "date_only": false, "value": "2024-02-08T16:49:55+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-02-08T16:49:55Z", "date_only": false, "value": "2024-02-08T16:49:55+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2024-02-08T16:49:55Z", "date_only": false, "value": "2024-02-08T16:49:55+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-02-08T23:00:00Z", "date_only": false, "value": "2024-02-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-02-08T23:00:00Z", "date_only": false, "value": "2024-02-08T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-03-06T10:53:25.170Z", "date_only": false, "value": "2024-03-06T10:53:25.170Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GRAFANA-2023-22462", "record": "BIT-GRAFANA-2023-22462", "field": "published"}, {"timestamp": "2024-08-02T10:13:48.351Z", "date_only": false, "value": "2024-08-02T10:13:48.351Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-22462", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:45:53.609Z", "date_only": false, "value": "2024-08-15T17:45:53.609+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0528", "record": "WID-SEC-W-2023-0528", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-24T05:01:46Z", "date_only": false, "value": "2025-10-24T05:01:46Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-22462", "record": "UBUNTU-CVE-2023-22462", "field": "modified"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-22462", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-27T00:00:00Z", "date_only": false, "value": "2026-01-27T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-22462", "record": "FKIE_CVE-2023-22462", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-01-28T04:55:37.854Z", "date_only": false, "value": "2026-01-28T04:55:37.854Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-22462", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-28T04:55:37.854Z", "date_only": false, "value": "2026-01-28T04:55:37.854Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-22462", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:35:30.350Z", "date_only": false, "value": "2026-06-17T05:35:30.350", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-22462", "record": "FKIE_CVE-2023-22462", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GRAFANA-2023-22462", "record": "BIT-GRAFANA-2023-22462", "field": "modified"}, {"timestamp": "2026-10-13T08:35:16Z", "date_only": false, "value": "2026-10-13T08:35:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-13T08:35:16Z", "date_only": false, "value": "2026-10-13T08:35:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-13T08:35:16Z", "date_only": false, "value": "2026-10-13T08:35:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2024:0746", "record": "RHSA-2024:0746", "field": "document.tracking.current_release_date"}]}