{"metadata": {"vulnerability": "CVE-2023-27493", "count": 36, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 29}}, "data": [{"timestamp": "2023-03-01T19:03:56.634Z", "date_only": false, "value": "2023-03-01T19:03:56.634Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-27493", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-03-16T00:00:00Z", "date_only": false, "value": "2023-03-16T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-03-27T00:00:00Z", "date_only": false, "value": "2023-03-27T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2023-04-04T19:00:00Z", "date_only": false, "value": "2023-04-04T19:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-04-04T19:46:57.044Z", "date_only": false, "value": "2023-04-04T19:46:57.044Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-27493", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-04-04T19:46:57.044Z", "date_only": false, "value": "2023-04-04T19:46:57.044Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-27493", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-04T20:15:00Z", "date_only": false, "value": "2023-04-04T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-27493", "record": "GSD-2023-27493", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-04-04T20:15:07.463Z", "date_only": false, "value": "2023-04-04T20:15:07.463", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27493", "record": "FKIE_CVE-2023-27493", "field": "published"}, {"timestamp": "2023-04-05T00:25:41Z", "date_only": false, "value": "2023-04-05T00:25:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/61427", "record": "CVE-2023-27493", "field": "creation_timestamp", "uuid": "be864b20-ee18-4861-8ac2-562808d7e0c8", "content": "\u203c CVE-2023-27493 \u203c\n\nEnvoy is an open source edge and service proxy designed for cloud-native applications. Prior to versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9, Envoy does not sanitize or escape request properties when generating request headers. This can lead to characters that are illegal in header values to be sent to the upstream service. In the worst case, it can cause upstream service to interpret the original request as two pipelined requests, possibly bypassing the intent of Envoy\u00e2\u20ac\u2122s security policy. Versions 1.26.0, 1.25.3, 1.24.4, 1.23.6, and 1.22.9 contain a patch. As a workaround, disable adding request headers based on the downstream request properties, such as downstream certificate properties.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/61427"}, {"timestamp": "2023-04-11T14:44:00Z", "date_only": false, "value": "2023-04-11T14:44Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-27493", "record": "GSD-2023-27493", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-11T16:46:48Z", "date_only": false, "value": "2023-08-11T16:46:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-11T16:46:48Z", "date_only": false, "value": "2023-08-11T16:46:48+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-08-11T16:46:48Z", "date_only": false, "value": "2023-08-11T16:46:48+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-13T22:00:00Z", "date_only": false, "value": "2023-08-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-13T22:00:00Z", "date_only": false, "value": "2023-08-13T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-13T22:00:00Z", "date_only": false, "value": "2023-08-13T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-06T22:00:00Z", "date_only": false, "value": "2023-09-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-09-10T22:00:00Z", "date_only": false, "value": "2023-09-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-09-11T22:00:00Z", "date_only": false, "value": "2023-09-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-09-14T22:00:00Z", "date_only": false, "value": "2023-09-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-09-27T22:00:00Z", "date_only": false, "value": "2023-09-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-10-08T22:00:00Z", "date_only": false, "value": "2023-10-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-10-08T22:00:00Z", "date_only": false, "value": "2023-10-08T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-13T01:20:55.708Z", "date_only": false, "value": "2023-12-13T01:20:55.708219Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-27493", "record": "GSD-2023-27493", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:53:47.786Z", "date_only": false, "value": "2024-03-06T10:53:47.786Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-ENVOY-2023-27493", "record": "BIT-ENVOY-2023-27493", "field": "published"}, {"timestamp": "2024-08-02T12:16:35.263Z", "date_only": false, "value": "2024-08-02T12:16:35.263Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-27493", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:57:03.993Z", "date_only": false, "value": "2024-08-15T17:57:03.993+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2058", "record": "WID-SEC-W-2023-2058", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-11T16:12:56.352Z", "date_only": false, "value": "2025-02-11T16:12:56.352188Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-27493", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-11T16:12:56.352Z", "date_only": false, "value": "2025-02-11T16:12:56.352188Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27493", "record": "FKIE_CVE-2023-27493", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-11T16:13:04.617Z", "date_only": false, "value": "2025-02-11T16:13:04.617Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-27493", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-11T16:13:04.617Z", "date_only": false, "value": "2025-02-11T16:13:04.617Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-27493", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-18T02:24:41Z", "date_only": false, "value": "2026-03-18T02:24:41+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-18T02:24:41Z", "date_only": false, "value": "2026-03-18T02:24:41+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-18T02:24:41Z", "date_only": false, "value": "2026-03-18T02:24:41+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:4623", "record": "RHSA-2023:4623", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T05:45:19.757Z", "date_only": false, "value": "2026-06-17T05:45:19.757", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27493", "record": "FKIE_CVE-2023-27493", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-ENVOY-2023-27493", "record": "BIT-ENVOY-2023-27493", "field": "modified"}]}