{"metadata": {"vulnerability": "CVE-2023-31419", "count": 38, "kinds": {"milestone": 9, "sighting": 11, "kev": 0, "other": 18}}, "data": [{"timestamp": "2023-04-27T18:54:56.704Z", "date_only": false, "value": "2023-04-27T18:54:56.704Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-31419", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-18T20:40:00Z", "date_only": false, "value": "2023-09-18T20:40:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / elastic", "record": "CVE-2023-31419", "field": "containers.cna.datePublic"}, {"timestamp": "2023-09-18T22:00:00Z", "date_only": false, "value": "2023-09-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2387", "record": "WID-SEC-W-2023-2387", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-18T22:00:00Z", "date_only": false, "value": "2023-09-18T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2387", "record": "WID-SEC-W-2023-2387", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-18T22:00:00Z", "date_only": false, "value": "2023-09-18T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2387", "record": "WID-SEC-W-2023-2387", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-19T00:00:00Z", "date_only": false, "value": "2023-09-19T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0762", "record": "CERTFR-2023-AVI-0762", "field": "last_revision_date"}, {"timestamp": "2023-09-19T00:00:00Z", "date_only": false, "value": "2023-09-19T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0762", "record": "CERTFR-2023-AVI-0762", "field": "initial_release_date"}, {"timestamp": "2023-09-19T00:00:00Z", "date_only": false, "value": "2023-09-19T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0762", "record": "CERTFR-2023-AVI-0762", "field": "revisions.0.revision_date"}, {"timestamp": "2023-09-20T22:42:59Z", "date_only": false, "value": "2023-09-20T22:42:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1732", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "817e94b6-2e15-4878-953c-8d726d5f465d", "content": "Elasticsearch Stack Overflow Vulnerability\nCVE-2023-31419 Exploit\n\ud83d\udc4c", "url": "https://t.me/proxy_bar/1732"}, {"timestamp": "2023-09-24T15:22:35Z", "date_only": false, "value": "2023-09-24T15:22:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1178", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "595432c5-f7ea-452c-b550-2669280aa750", "content": "https://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419\nElasticsearch\u5806\u6808\u6ea2\u51fa\u6f0f\u6d1e\n#github", "url": "https://t.me/CNArsenal/1178"}, {"timestamp": "2023-09-24T18:54:10Z", "date_only": false, "value": "2023-09-24T18:54:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9082", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "2652e553-2b4e-4678-9038-12d0febb655a", "content": "#exploit\n1. CVE-2023-31419:\nElasticsearch StackOverflow vulnerability\nhttps://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419\n\n2. Gallery3D Tecno Hidden Image Bypass Exploit\nhttps://github.com/tahaafarooq/gallery3d-tecno-exploit", "url": "https://t.me/CyberSecurityTechnologies/9082"}, {"timestamp": "2023-09-27T04:16:37Z", "date_only": false, "value": "2023-09-27T04:16:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3212", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "7909232a-21f9-4fa6-98a7-a4e2d36aa312", "content": "Hackers Factory \n\nWEB-Wordlist-Generator creates related wordlists after scanning your web applications.\n\nhttps://github.com/OsmanKandemir/web-wordlist-generator\n\nThis repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.\n\nhttps://github.com/Bert-JanP/Open-Source-Threat-Intel-Feeds\n\nProof of concept on BYOVD attack\n\nhttps://github.com/MrEmpy/Reaper\n\nThis is the source code for Data-free Backdoor. Our paper is accepted by the 32nd USENIX Security Symposium (USENIX Security 2023).\n\nhttps://github.com/lvpeizhuo/Data-free_Backdoor\n\nA tool for checking the security hardening options of the Linux kernel\n\nhttps://github.com/a13xp0p0v/kernel-hardening-checker\n\nElasticsearch Stack Overflow Vulnerability\n\nhttps://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419\n\nAn automated script to extract hidden images from Tecno Camon X\n\nhttps://github.com/tahaafarooq/gallery3d-tecno-exploit\n\nOfficial source codes for the paper \"A Stealthy Backdoor Attack for Code Models\"\n\nhttps://github.com/qyb156/stealthy_backdoor_attack\n\nCMSmap is a python open source CMS scanner that automates the process of detecting security flaws of the most popular CMSs.\n\nRun it on file mode.\n\npython3 cmsmap.py -i test.txt -t 200 -F -s -o test-resulte.txt\n\nhttps://github.com/dionach/CMSmap\nhttps://github.com/Doctype02/exploitdb\n\nBChecks collection for Burp Suite Professional\n\nhttps://github.com/emadshanab/BChecks-Collection\n\n#infosec #cybersecurity #hackersfactory\n\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/3212"}, {"timestamp": "2023-09-28T05:04:24Z", "date_only": false, "value": "2023-09-28T05:04:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cJE2f1Ylibso8WfxExY7XnGGn9loSwHSSInb5Uh2BQYHEQ", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "5a1df80f-f24b-4675-a019-4e3bb5c1d88d"}, {"timestamp": "2023-09-28T18:37:41Z", "date_only": false, "value": "2023-09-28T18:37:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/4390", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "de8247d5-ed9f-4c1f-84f6-ceefbdc5caa0", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "url": "https://t.me/crackcodes/4390"}, {"timestamp": "2023-09-30T13:51:23Z", "date_only": false, "value": "2023-09-30T13:51:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hy3RTMssr2TEFMcQVJs7PvvoO6v5qJcmAwo4yeCaKvqq5G0", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "34b33867-f01c-406b-aead-d2117cf8ed2d"}, {"timestamp": "2023-10-10T07:12:43Z", "date_only": false, "value": "2023-10-10T07:12:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/4382", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "b2c633e2-9d22-43b4-8ccf-7cbccb45a0c6", "content": "\ud83d\udd78Black Wallpaper HD Background App Data Leak : Download\n\n\ud83e\udeacPlayTube CVE-2023-4714 Exploit : Check\n\n\ud83d\udc38PaperCut NG CVE-2023-4568 Exploit : Check\n\n\ud83d\udcccPrestashop CVE-2023-39677 Exploit : Check\n\n\ud83d\udccdMicrosoft SharePoint: CVE-2023-29357 Exploit : Check\n\n\ud83d\udc32Cisco CVE-2023-20209 Exploit : Check\n\n\ud83d\udcefElasticsearch Exploit-CVE-2023-31419 : Check\n\n\ud83e\ude85Chinese Maoxin Database Leak : Download\n\n\ud83d\udc7e\ud83d\udcdfNSA Equation Group Hacking Tools Leaked : Download", "url": "https://t.me/crackcodes/4382"}, {"timestamp": "2023-10-26T17:06:14.305Z", "date_only": false, "value": "2023-10-26T17:06:14.305Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-31419", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-10-26T18:15:00Z", "date_only": false, "value": "2023-10-26T18:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-31419", "record": "UBUNTU-CVE-2023-31419", "field": "published"}, {"timestamp": "2023-10-26T18:15:08Z", "date_only": false, "value": "2023-10-26T18:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QWRX-45XF-JJF7", "record": "GHSA-QWRX-45XF-JJF7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-26T18:15:08.647Z", "date_only": false, "value": "2023-10-26T18:15:08.647", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-31419", "record": "FKIE_CVE-2023-31419", "field": "published"}, {"timestamp": "2023-10-26T18:15:08.647Z", "date_only": false, "value": "2023-10-26T18:15:08.647", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-31419", "record": "GSD-2023-31419", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-10-26T18:30:23Z", "date_only": false, "value": "2023-10-26T18:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QWRX-45XF-JJF7", "record": "GHSA-QWRX-45XF-JJF7", "field": "published"}, {"timestamp": "2023-10-26T22:16:02Z", "date_only": false, "value": "2023-10-26T22:16:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/72995", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "c3fafa8e-1b83-4d34-9252-dacb82bd00ef", "content": "\u203c CVE-2023-31419 \u203c\n\nA flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/72995"}, {"timestamp": "2023-10-30T15:15:50Z", "date_only": false, "value": "2023-10-30T15:15:50Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QWRX-45XF-JJF7", "record": "GHSA-QWRX-45XF-JJF7", "field": "modified"}, {"timestamp": "2023-11-16T15:07:11.522Z", "date_only": false, "value": "2023-11-16T15:07:11.522Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / elastic", "record": "CVE-2023-31419", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-13T01:20:29.534Z", "date_only": false, "value": "2023-12-13T01:20:29.534167Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-31419", "record": "GSD-2023-31419", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-28T04:59:48Z", "date_only": false, "value": "2024-01-28T04:59:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3211", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "ae3113d0-db43-4160-b76d-a2afc8422236", "content": "#ExploitObserverAlert\n\nCVE-2023-31419\n\nDESCRIPTION: Exploit Observer has 6 entries in 3 file formats related to CVE-2023-31419. A flaw was discovered in Elasticsearch, affecting the _search API that allowed a specially crafted query string to cause a Stack Overflow and ultimately a Denial of Service.\n\nFIRST-EPSS: 0.000810000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/3211"}, {"timestamp": "2024-02-01T02:16:30.827Z", "date_only": false, "value": "2024-02-01T02:16:30.827", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-31419", "record": "GSD-2023-31419", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-08T23:00:00Z", "date_only": false, "value": "2024-02-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2387", "record": "WID-SEC-W-2023-2387", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-02-08T23:00:00Z", "date_only": false, "value": "2024-02-08T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2387", "record": "WID-SEC-W-2023-2387", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-03-06T10:51:47.965Z", "date_only": false, "value": "2024-03-06T10:51:47.965Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-ELASTICSEARCH-2023-31419", "record": "BIT-ELASTICSEARCH-2023-31419", "field": "published"}, {"timestamp": "2024-08-02T14:53:31.070Z", "date_only": false, "value": "2024-08-02T14:53:31.070Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-31419", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:58:35.819Z", "date_only": false, "value": "2024-08-15T17:58:35.819+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2387", "record": "WID-SEC-W-2023-2387", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:28:27Z", "date_only": false, "value": "2024-08-16T08:28:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/1116", "record": "CVE-2023-31419", "field": "creation_timestamp", "uuid": "f170ca10-820d-4c0b-90f3-303be74793cd", "content": "#exploit\n1. CVE-2023-31419:\nElasticsearch StackOverflow vulnerability\nhttps://github.com/sqrtZeroKnowledge/Elasticsearch-Exploit-CVE-2023-31419\n\n2. Gallery3D Tecno Hidden Image Bypass Exploit\nhttps://github.com/tahaafarooq/gallery3d-tecno-exploit", "url": "https://t.me/Rootsec_2/1116"}, {"timestamp": "2025-02-13T16:50:07.612Z", "date_only": false, "value": "2025-02-13T16:50:07.612Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-31419", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-24T05:01:57Z", "date_only": false, "value": "2025-10-24T05:01:57Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-31419", "record": "UBUNTU-CVE-2023-31419", "field": "modified"}, {"timestamp": "2026-06-17T05:56:54.573Z", "date_only": false, "value": "2026-06-17T05:56:54.573", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-31419", "record": "FKIE_CVE-2023-31419", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-ELASTICSEARCH-2023-31419", "record": "BIT-ELASTICSEARCH-2023-31419", "field": "modified"}]}