{"metadata": {"vulnerability": "CVE-2023-26045", "count": 20, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 14}}, "data": [{"timestamp": "2023-02-17T22:44:03.149Z", "date_only": false, "value": "2023-02-17T22:44:03.149Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-26045", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-07-24T00:00:00Z", "date_only": true, "value": "2023-07-24", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-26045", "record": "GSD-2023-26045", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-07-24T21:08:47.413Z", "date_only": false, "value": "2023-07-24T21:08:47.413Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-26045", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-07-24T22:15:00Z", "date_only": false, "value": "2023-07-24T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-26045", "record": "GSD-2023-26045", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-07-24T22:15:10Z", "date_only": false, "value": "2023-07-24T22:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VH2G-6C4X-5HMP", "record": "GHSA-VH2G-6C4X-5HMP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-07-24T22:15:10.033Z", "date_only": false, "value": "2023-07-24T22:15:10.033", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26045", "record": "FKIE_CVE-2023-26045", "field": "published"}, {"timestamp": "2023-07-25T02:38:44Z", "date_only": false, "value": "2023-07-25T02:38:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/67191", "record": "CVE-2023-26045", "field": "creation_timestamp", "uuid": "f2a9f65c-240f-43dd-a62b-13bc2738299f", "content": "\u203c CVE-2023-26045 \u203c\n\nNodeBB is Node.js based forum software. Starting in version 2.5.0 and prior to version 2.8.7, due to the use of the object destructuring assignment syntax in the user export code path, combined with a path traversal vulnerability, a specially crafted payload could invoke the user export logic to arbitrarily execute javascript files on the local disk. This issue is patched in version 2.8.7. As a workaround, site maintainers can cherry pick the fix into their codebase to patch the exploit.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/67191"}, {"timestamp": "2023-07-25T13:54:13Z", "date_only": false, "value": "2023-07-25T13:54:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VH2G-6C4X-5HMP", "record": "GHSA-VH2G-6C4X-5HMP", "field": "published"}, {"timestamp": "2023-07-25T13:54:13Z", "date_only": false, "value": "2023-07-25T13:54:13Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VH2G-6C4X-5HMP", "record": "GHSA-VH2G-6C4X-5HMP", "field": "modified"}, {"timestamp": "2023-07-27T13:26:17Z", "date_only": false, "value": "2023-07-27T13:26:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8742", "record": "CVE-2023-26045", "field": "creation_timestamp", "uuid": "8ae1859e-b08d-4331-8e70-4abaed8f7b42", "content": "#exploit \n1. CVE-2021-40346:\nHAProxy HTTP Smuggling\nhttps://github.com/knqyf263/CVE-2021-40346\n\n2. CVE-2023-26045:\nNodeBB Forum Software RCE Flaw\nhttps://securityonline.info/cve-2023-26045-nodebb-forum-software-remote-code-execution-flaw", "url": "https://t.me/CyberSecurityTechnologies/8742"}, {"timestamp": "2023-08-01T00:00:00Z", "date_only": true, "value": "2023-08-01", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-26045", "record": "GSD-2023-26045", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-08-31T18:06:18.481Z", "date_only": false, "value": "2023-08-31T18:06:18.481Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-26045", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-08-31T19:15:00Z", "date_only": false, "value": "2023-08-31T19:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-26045", "record": "GSD-2023-26045", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:53.763Z", "date_only": false, "value": "2023-12-13T01:20:53.763614Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-26045", "record": "GSD-2023-26045", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T11:39:06.562Z", "date_only": false, "value": "2024-08-02T11:39:06.562Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-26045", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-10T18:18:13.956Z", "date_only": false, "value": "2024-10-10T18:18:13.956281Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-26045", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-10T18:18:13.956Z", "date_only": false, "value": "2024-10-10T18:18:13.956281Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26045", "record": "FKIE_CVE-2023-26045", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-10T18:33:40.830Z", "date_only": false, "value": "2024-10-10T18:33:40.830Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-26045", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T16:44:43.667Z", "date_only": false, "value": "2025-02-13T16:44:43.667Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-26045", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:42:32.303Z", "date_only": false, "value": "2026-06-17T05:42:32.303", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26045", "record": "FKIE_CVE-2023-26045", "field": "lastModified"}]}