{"metadata": {"vulnerability": "CVE-2023-27639", "count": 25, "kinds": {"milestone": 4, "sighting": 4, "kev": 5, "other": 12}}, "data": [{"timestamp": "2023-03-05T00:00:00Z", "date_only": false, "value": "2023-03-05T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-27639", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-27639", "field": "timestamps.asserted_at", "uuid": "7fdd1ec3-3090-47b2-95e8-28d4553ef459", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-27639", "field": "evidence.0.details.added_date", "uuid": "7fdd1ec3-3090-47b2-95e8-28d4553ef459", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-27639", "field": "timestamps.first_seen_at", "uuid": "7fdd1ec3-3090-47b2-95e8-28d4553ef459", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-27639", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-27639", "field": "status.status_updated_at", "uuid": "7fdd1ec3-3090-47b2-95e8-28d4553ef459", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-27639", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-01T21:15:00Z", "date_only": false, "value": "2023-06-01T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-27639", "record": "GSD-2023-27639", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-06-01T21:15:09Z", "date_only": false, "value": "2023-06-01T21:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VR24-25X3-MC3H", "record": "GHSA-VR24-25X3-MC3H", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-06-01T21:15:09.260Z", "date_only": false, "value": "2023-06-01T21:15:09.260", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27639", "record": "FKIE_CVE-2023-27639", "field": "published"}, {"timestamp": "2023-06-01T21:30:25Z", "date_only": false, "value": "2023-06-01T21:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VR24-25X3-MC3H", "record": "GHSA-VR24-25X3-MC3H", "field": "published"}, {"timestamp": "2023-06-09T15:48:00Z", "date_only": false, "value": "2023-06-09T15:48Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-27639", "record": "GSD-2023-27639", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:55.907Z", "date_only": false, "value": "2023-12-13T01:20:55.907881Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-27639", "record": "GSD-2023-27639", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T04:28:05Z", "date_only": false, "value": "2024-04-04T04:28:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VR24-25X3-MC3H", "record": "GHSA-VR24-25X3-MC3H", "field": "modified"}, {"timestamp": "2024-08-02T12:16:36.607Z", "date_only": false, "value": "2024-08-02T12:16:36.607Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-27639", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-09T19:41:37.928Z", "date_only": false, "value": "2025-01-09T19:41:37.928620Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-27639", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-09T19:41:37.928Z", "date_only": false, "value": "2025-01-09T19:41:37.928620Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27639", "record": "FKIE_CVE-2023-27639", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-09T19:42:36.229Z", "date_only": false, "value": "2025-01-09T19:42:36.229Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-27639", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-09T19:42:36.229Z", "date_only": false, "value": "2025-01-09T19:42:36.229Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-27639", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-09T20:17:14Z", "date_only": false, "value": "2025-01-09T20:17:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/1056", "record": "CVE-2023-27639", "field": "creation_timestamp", "uuid": "455ad962-1797-445f-9c5e-911be2f86382", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27639\n\ud83d\udd39 Description: An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter file_name in the tshirtecommerce/ajax.php?type=svg endpoint, to allow a remote attacker to traverse directories on the system in order to open files (without restriction on the extension and path). Only files that can be parsed in XML can be opened. This is exploited in the wild in March 2023.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T19:42:36.229Z\n\ud83d\udd17 References:\n1. https://friends-of-presta.github.io/security-advisories/module/2023/03/30/tshirtecommerce_cwe-22.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/1056"}, {"timestamp": "2026-06-17T05:45:38.903Z", "date_only": false, "value": "2026-06-17T05:45:38.903", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27639", "record": "FKIE_CVE-2023-27639", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:54.274Z", "date_only": false, "value": "2026-06-19T12:46:54.274851Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7004c6a5-8f2b-4862-88ba-c0ad72ee74bd", "record": "CVE-2023-27639", "field": "creation_timestamp", "uuid": "2b2e776c-c531-44b2-9fb8-32d1a3fa32e5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7004c6a5-8f2b-4862-88ba-c0ad72ee74bd"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-27639", "field": "timestamps.recorded_at", "uuid": "7fdd1ec3-3090-47b2-95e8-28d4553ef459", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:54.469Z", "date_only": false, "value": "2026-06-23T11:12:54.469831Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7fdd1ec3-3090-47b2-95e8-28d4553ef459", "record": "CVE-2023-27639", "field": "creation_timestamp", "uuid": "3bafbd48-5731-4320-abb0-c0019ea6c75e", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/7fdd1ec3-3090-47b2-95e8-28d4553ef459"}, {"timestamp": "2026-06-23T14:04:05.179Z", "date_only": false, "value": "2026-06-23T14:04:05.179256Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f8df638a-f40b-482c-946a-e08077249b82", "record": "CVE-2023-27639", "field": "creation_timestamp", "uuid": "cb3c5c86-208e-4882-a954-4f76a7d34c8b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f8df638a-f40b-482c-946a-e08077249b82"}]}