{"metadata": {"vulnerability": "CVE-2023-30801", "count": 36, "kinds": {"milestone": 7, "sighting": 4, "kev": 5, "other": 20}}, "data": [{"timestamp": "2023-04-18T10:31:45.962Z", "date_only": false, "value": "2023-04-18T10:31:45.962Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-30801", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-10-10T13:46:46Z", "date_only": false, "value": "2023-10-10T13:46:46+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-30801", "field": "timestamps.asserted_at", "publication_copy": true, "uuid": "ff63ced3-e5fc-4fd0-a6d1-444135623ccf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-10T13:46:46Z", "date_only": false, "value": "2023-10-10T13:46:46+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-30801", "field": "timestamps.first_seen_at", "publication_copy": true, "uuid": "ff63ced3-e5fc-4fd0-a6d1-444135623ccf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-10T13:46:46Z", "date_only": false, "value": "2023-10-10T13:46:46+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-30801", "field": "status.status_updated_at", "uuid": "ff63ced3-e5fc-4fd0-a6d1-444135623ccf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-10T13:46:46.775Z", "date_only": false, "value": "2023-10-10T13:46:46.775Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-30801", "field": "evidence.0.details.added_date", "uuid": "ff63ced3-e5fc-4fd0-a6d1-444135623ccf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-10T13:46:46.775Z", "date_only": false, "value": "2023-10-10T13:46:46.775Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-30801", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-10-10T14:15:00Z", "date_only": false, "value": "2023-10-10T14:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-30801", "record": "UBUNTU-CVE-2023-30801", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-10-10T14:15:00Z", "date_only": false, "value": "2023-10-10T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-30801", "record": "GSD-2023-30801", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-10-10T14:15:10Z", "date_only": false, "value": "2023-10-10T14:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VCHQ-5HMX-6HMP", "record": "GHSA-VCHQ-5HMX-6HMP", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-10-10T14:15:10.493Z", "date_only": false, "value": "2023-10-10T14:15:10.493", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-30801", "record": "FKIE_CVE-2023-30801", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-10-10T15:30:51Z", "date_only": false, "value": "2023-10-10T15:30:51Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VCHQ-5HMX-6HMP", "record": "GHSA-VCHQ-5HMX-6HMP", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-10-10T18:16:40Z", "date_only": false, "value": "2023-10-10T18:16:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/71941", "record": "CVE-2023-30801", "field": "creation_timestamp", "uuid": "6cc3bb90-5e5f-4be0-80f4-4bd5cd059803", "content": "\u203c CVE-2023-30801 \u203c\n\nAll versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and execute arbitrary operating system commands using the \"external program\" feature in the web user interface. This was reportedly exploited in the wild in March 2023.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/71941", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-11-30T04:15:00Z", "date_only": false, "value": "2023-11-30T04:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-30801", "record": "GSD-2023-30801", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-12-07T09:01:17Z", "date_only": false, "value": "2023-12-07T09:01:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0391-1", "record": "OPENSUSE-SU-2023:0391-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-12-07T09:01:17Z", "date_only": false, "value": "2023-12-07T09:01:17Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0391-1", "record": "OPENSUSE-SU-2023:0391-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2023-12-07T09:01:17Z", "date_only": false, "value": "2023-12-07T09:01:17Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0391-1", "record": "OPENSUSE-SU-2023:0391-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2023-12-07T09:01:17Z", "date_only": false, "value": "2023-12-07T09:01:17Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0391-1", "record": "OPENSUSE-SU-2023:0391-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-12-13T01:20:52.164Z", "date_only": false, "value": "2023-12-13T01:20:52.164002Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-30801", "record": "GSD-2023-30801", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13477-1", "record": "OPENSUSE-SU-2024:13477-1", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13477-1", "record": "OPENSUSE-SU-2024:13477-1", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13477-1", "record": "OPENSUSE-SU-2024:13477-1", "field": "vulnerabilities.0.threats.0.date", "linked_record": true}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13477-1", "record": "OPENSUSE-SU-2024:13477-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-08-02T14:37:15.452Z", "date_only": false, "value": "2024-08-02T14:37:15.452Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-30801", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T18:31:55Z", "date_only": false, "value": "2025-02-13T18:31:55Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VCHQ-5HMX-6HMP", "record": "GHSA-VCHQ-5HMX-6HMP", "field": "modified", "linked_record": true}, {"timestamp": "2025-11-21T16:15:48.956Z", "date_only": false, "value": "2025-11-21T16:15:48.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-30801", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-21T16:15:48.956Z", "date_only": false, "value": "2025-11-21T16:15:48.956Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2023-30801", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:55:43.520Z", "date_only": false, "value": "2026-06-17T05:55:43.520", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-30801", "record": "FKIE_CVE-2023-30801", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:47.202Z", "date_only": false, "value": "2026-06-19T12:46:47.202695Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acbd87d4-2cf7-443c-b844-85171fed11c0", "record": "CVE-2023-30801", "field": "creation_timestamp", "uuid": "7c185868-0c6f-4375-9fab-4796e9648d92", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/acbd87d4-2cf7-443c-b844-85171fed11c0", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-30801", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "ff63ced3-e5fc-4fd0-a6d1-444135623ccf", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:54.362Z", "date_only": false, "value": "2026-06-23T11:12:54.362860Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ff63ced3-e5fc-4fd0-a6d1-444135623ccf", "record": "CVE-2023-30801", "field": "creation_timestamp", "uuid": "ae4d2085-3c63-4fbe-8df4-046e7becdc9e", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/ff63ced3-e5fc-4fd0-a6d1-444135623ccf", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:04:05.041Z", "date_only": false, "value": "2026-06-23T14:04:05.041504Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c04574c-9524-43ab-ac1c-d4d90f85c382", "record": "CVE-2023-30801", "field": "creation_timestamp", "uuid": "c108e28e-362a-4584-abd9-db295bcdf4bb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8c04574c-9524-43ab-ac1c-d4d90f85c382", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-20T19:47:30Z", "date_only": false, "value": "2026-09-20T19:47:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0391-1", "record": "OPENSUSE-SU-2023:0391-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T19:47:30Z", "date_only": false, "value": "2026-09-20T19:47:30Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0391-1", "record": "OPENSUSE-SU-2023:0391-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-09-20T21:01:33Z", "date_only": false, "value": "2026-09-20T21:01:33Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13477-1", "record": "OPENSUSE-SU-2024:13477-1", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-09-20T21:01:33Z", "date_only": false, "value": "2026-09-20T21:01:33Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13477-1", "record": "OPENSUSE-SU-2024:13477-1", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-17T09:17:57Z", "date_only": false, "value": "2026-10-17T09:17:57Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-30801", "record": "UBUNTU-CVE-2023-30801", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T04:35:07.887Z", "anchors": {"origin": {"timestamp": "2023-10-10T13:46:46.775Z", "date_only": false, "value": "2023-10-10T13:46:46.775Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-30801", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-10-10T13:46:46.775Z", "date_only": false, "value": "2023-10-10T13:46:46.775Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-30801", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2023-10-10T18:16:40Z", "date_only": false, "value": "2023-10-10T18:16:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/71941", "record": "CVE-2023-30801", "field": "creation_timestamp", "uuid": "6cc3bb90-5e5f-4be0-80f4-4bd5cd059803", "content": "\u203c CVE-2023-30801 \u203c\n\nAll versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and execute arbitrary operating system commands using the \"external program\" feature in the web user interface. This was reportedly exploited in the wild in March 2023.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/71941", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 16193.225, "hours": 4.4981180555555556, "days": 0.18742158564814815, "min_seconds": 16193.225, "max_seconds": 16193.225, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-10-10T13:46:46.775Z", "date_only": false, "value": "2023-10-10T13:46:46.775Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-30801", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-10T18:16:40Z", "date_only": false, "value": "2023-10-10T18:16:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/71941", "record": "CVE-2023-30801", "field": "creation_timestamp", "uuid": "6cc3bb90-5e5f-4be0-80f4-4bd5cd059803", "content": "\u203c CVE-2023-30801 \u203c\n\nAll versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and execute arbitrary operating system commands using the \"external program\" feature in the web user interface. This was reportedly exploited in the wild in March 2023.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/71941", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 16193.225, "hours": 4.4981180555555556, "days": 0.18742158564814815, "min_seconds": 16193.225, "max_seconds": 16193.225, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-10-10T13:46:46.775Z", "date_only": false, "value": "2023-10-10T13:46:46.775Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-30801", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-10T18:16:40Z", "date_only": false, "value": "2023-10-10T18:16:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/71941", "record": "CVE-2023-30801", "field": "creation_timestamp", "uuid": "6cc3bb90-5e5f-4be0-80f4-4bd5cd059803", "content": "\u203c CVE-2023-30801 \u203c\n\nAll versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and execute arbitrary operating system commands using the \"external program\" feature in the web user interface. This was reportedly exploited in the wild in March 2023.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/71941", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 97598901.112725, "hours": 27110.805864645834, "days": 1129.6169110269097, "min_seconds": 97598901.112725, "max_seconds": 97598901.112725, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-10-10T13:46:46.775Z", "date_only": false, "value": "2023-10-10T13:46:46.775Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-30801", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T04:35:07.887Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 97582707.887725, "hours": 27106.307746590275, "days": 1129.4294894412615, "min_seconds": 97582707.887725, "max_seconds": 97582707.887725, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-10-10T18:16:40Z", "date_only": false, "value": "2023-10-10T18:16:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/71941", "record": "CVE-2023-30801", "field": "creation_timestamp", "uuid": "6cc3bb90-5e5f-4be0-80f4-4bd5cd059803", "content": "\u203c CVE-2023-30801 \u203c\n\nAll versions of the qBittorrent client through 4.5.5 use default credentials when the web user interface is enabled. The administrator is not forced to change the default credentials. As of 4.5.5, this issue has not been fixed. A remote attacker can use the default credentials to authenticate and execute arbitrary operating system commands using the \"external program\" feature in the web user interface. This was reportedly exploited in the wild in March 2023.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/71941", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T04:35:07.887Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}