{"metadata": {"vulnerability": "CVE-2023-27640", "count": 33, "kinds": {"milestone": 4, "sighting": 6, "kev": 11, "other": 12}}, "data": [{"timestamp": "2023-03-05T00:00:00Z", "date_only": false, "value": "2023-03-05T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-27640", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-27640", "field": "timestamps.asserted_at", "uuid": "3225cea4-77cb-4a67-8bd6-6361e745ad46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-27640", "field": "evidence.0.details.added_date", "uuid": "3225cea4-77cb-4a67-8bd6-6361e745ad46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-27640", "field": "timestamps.first_seen_at", "uuid": "3225cea4-77cb-4a67-8bd6-6361e745ad46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-27640", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-27640", "field": "status.status_updated_at", "uuid": "3225cea4-77cb-4a67-8bd6-6361e745ad46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-01T00:00:00Z", "date_only": false, "value": "2023-06-01T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-27640", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-01T21:15:00Z", "date_only": false, "value": "2023-06-01T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-27640", "record": "GSD-2023-27640", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-06-01T21:15:09Z", "date_only": false, "value": "2023-06-01T21:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W2HV-2PWP-7HWW", "record": "GHSA-W2HV-2PWP-7HWW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-06-01T21:15:09.313Z", "date_only": false, "value": "2023-06-01T21:15:09.313", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27640", "record": "FKIE_CVE-2023-27640", "field": "published"}, {"timestamp": "2023-06-01T21:30:25Z", "date_only": false, "value": "2023-06-01T21:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W2HV-2PWP-7HWW", "record": "GHSA-W2HV-2PWP-7HWW", "field": "published"}, {"timestamp": "2023-06-09T16:11:00Z", "date_only": false, "value": "2023-06-09T16:11Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-27640", "record": "GSD-2023-27640", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:55.737Z", "date_only": false, "value": "2023-12-13T01:20:55.737214Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-27640", "record": "GSD-2023-27640", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-04T04:28:06Z", "date_only": false, "value": "2024-04-04T04:28:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W2HV-2PWP-7HWW", "record": "GHSA-W2HV-2PWP-7HWW", "field": "modified"}, {"timestamp": "2024-04-27T04:54:26Z", "date_only": false, "value": "2024-04-27T04:54:26+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-27640", "field": "timestamps.asserted_at", "uuid": "c561e829-7c26-4c48-ab09-03038b820c01", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-27T04:54:26Z", "date_only": false, "value": "2024-04-27T04:54:26+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-27640", "field": "timestamps.first_seen_at", "uuid": "c561e829-7c26-4c48-ab09-03038b820c01", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-02T12:16:36.598Z", "date_only": false, "value": "2024-08-02T12:16:36.598Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-27640", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-08T20:54:52.771Z", "date_only": false, "value": "2025-01-08T20:54:52.771919Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-27640", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-08T20:54:52.771Z", "date_only": false, "value": "2025-01-08T20:54:52.771919Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27640", "record": "FKIE_CVE-2023-27640", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-08T20:58:57.837Z", "date_only": false, "value": "2025-01-08T20:58:57.837Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-27640", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-08T20:58:57.837Z", "date_only": false, "value": "2025-01-08T20:58:57.837Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-27640", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-08T21:13:28Z", "date_only": false, "value": "2025-01-08T21:13:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/834", "record": "CVE-2023-27640", "field": "creation_timestamp", "uuid": "a68a00eb-63ea-4b73-8ecd-12b39d2d3eac", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-27640\n\ud83d\udd39 Description: An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter type in the /tshirtecommerce/fonts.php endpoint, to allow a remote attacker to traverse directories on the system in order to open files (without restriction on the extension and path). The content of the file is returned with base64 encoding. This is exploited in the wild in March 2023.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-08T20:58:57.837Z\n\ud83d\udd17 References:\n1. https://friends-of-presta.github.io/security-advisories/module/2023/03/30/tshirtecommerce_cwe-22.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/834"}, {"timestamp": "2026-06-17T05:45:39.087Z", "date_only": false, "value": "2026-06-17T05:45:39.087", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27640", "record": "FKIE_CVE-2023-27640", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:54.207Z", "date_only": false, "value": "2026-06-19T12:46:54.207627Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c24fec1d-a5b5-44b9-8a2b-46a73fb1d8d0", "record": "CVE-2023-27640", "field": "creation_timestamp", "uuid": "106a65c1-6bb4-4747-8643-7dda167c5155", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c24fec1d-a5b5-44b9-8a2b-46a73fb1d8d0"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-27640", "field": "timestamps.recorded_at", "uuid": "3225cea4-77cb-4a67-8bd6-6361e745ad46", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:54.413Z", "date_only": false, "value": "2026-06-23T11:12:54.413296Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3225cea4-77cb-4a67-8bd6-6361e745ad46", "record": "CVE-2023-27640", "field": "creation_timestamp", "uuid": "2890787d-c1a7-4f5d-b281-784dca2432a0", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3225cea4-77cb-4a67-8bd6-6361e745ad46"}, {"timestamp": "2026-06-23T14:04:05.114Z", "date_only": false, "value": "2026-06-23T14:04:05.114410Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d0375952-fbc9-4919-b27c-20f30ba7cadc", "record": "CVE-2023-27640", "field": "creation_timestamp", "uuid": "8646f6d2-f230-4c6d-bc83-ad794ea97a14", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d0375952-fbc9-4919-b27c-20f30ba7cadc"}, {"timestamp": "2026-06-30T09:23:14.763Z", "date_only": false, "value": "2026-06-30T09:23:14.763382Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91340599-32fd-42fa-b378-c97099fc43d1", "record": "CVE-2023-27640", "field": "creation_timestamp", "uuid": "0ac39b1b-d2ad-45db-bebc-0068da50ef01", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91340599-32fd-42fa-b378-c97099fc43d1"}, {"timestamp": "2026-07-01T05:54:37.447Z", "date_only": false, "value": "2026-07-01T05:54:37.447585Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c561e829-7c26-4c48-ab09-03038b820c01", "record": "CVE-2023-27640", "field": "creation_timestamp", "uuid": "13e2ba23-ea97-4247-a8fb-19d29265826c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/c561e829-7c26-4c48-ab09-03038b820c01"}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-27640", "field": "timestamps.last_seen_at", "uuid": "c561e829-7c26-4c48-ab09-03038b820c01", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": true, "value": "2026-11-01", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-27640", "field": "evidence.0.details.observation_date", "uuid": "c561e829-7c26-4c48-ab09-03038b820c01", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-27640", "field": "status.status_updated_at", "uuid": "c561e829-7c26-4c48-ab09-03038b820c01", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T01:00:01Z", "date_only": false, "value": "2026-11-03T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-27640", "field": "timestamps.recorded_at", "uuid": "c561e829-7c26-4c48-ab09-03038b820c01", "status": {"status_reason": "confirmed", "exploited": true}}]}