{"metadata": {"vulnerability": "CVE-2023-34040", "count": 44, "kinds": {"milestone": 8, "sighting": 12, "kev": 0, "other": 24}}, "data": [{"timestamp": "2023-05-25T17:21:56.201Z", "date_only": false, "value": "2023-05-25T17:21:56.201Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-34040", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-23T14:59:00Z", "date_only": false, "value": "2023-08-23T14:59:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / vmware", "record": "CVE-2023-34040", "field": "containers.cna.datePublic"}, {"timestamp": "2023-08-24T00:00:00Z", "date_only": false, "value": "2023-08-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0679", "record": "CERTFR-2023-AVI-0679", "field": "last_revision_date"}, {"timestamp": "2023-08-24T00:00:00Z", "date_only": false, "value": "2023-08-24T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0679", "record": "CERTFR-2023-AVI-0679", "field": "initial_release_date"}, {"timestamp": "2023-08-24T00:00:00Z", "date_only": false, "value": "2023-08-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0679", "record": "CERTFR-2023-AVI-0679", "field": "revisions.0.revision_date"}, {"timestamp": "2023-08-24T12:59:20.620Z", "date_only": false, "value": "2023-08-24T12:59:20.620Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-34040", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-08-24T12:59:20.620Z", "date_only": false, "value": "2023-08-24T12:59:20.620Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "CVE-2023-34040", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-08-24T13:15:00Z", "date_only": false, "value": "2023-08-24T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-34040", "record": "GSD-2023-34040", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-08-24T13:15:07Z", "date_only": false, "value": "2023-08-24T13:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CRQF-Q9FP-HWJW", "record": "GHSA-CRQF-Q9FP-HWJW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-08-24T13:15:07.453Z", "date_only": false, "value": "2023-08-24T13:15:07.453", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34040", "record": "FKIE_CVE-2023-34040", "field": "published"}, {"timestamp": "2023-08-24T15:31:10Z", "date_only": false, "value": "2023-08-24T15:31:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CRQF-Q9FP-HWJW", "record": "GHSA-CRQF-Q9FP-HWJW", "field": "published"}, {"timestamp": "2023-08-24T16:14:54Z", "date_only": false, "value": "2023-08-24T16:14:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/69115", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "88a16f9a-0b5f-481f-bc94-1e38edb90ff0", "content": "\u203c CVE-2023-34040 \u203c\n\nIn Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers.Specifically, an application is vulnerable when all of the following are true: * The user does not\u00c2\u00a0configure an ErrorHandlingDeserializer for the key and/or value of the record * The user explicitly sets container properties checkDeserExWhenKeyNull and/or checkDeserExWhenValueNull container properties to true. * The user allows untrusted sources to publish to a Kafka topicBy default, these properties are false, and the container only attempts to deserialize the headers if an ErrorHandlingDeserializer is configured. The ErrorHandlingDeserializer prevents the vulnerability by removing any such malicious headers before processing the record.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/69115"}, {"timestamp": "2023-08-24T22:00:00Z", "date_only": false, "value": "2023-08-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2170", "record": "WID-SEC-W-2023-2170", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-24T22:00:00Z", "date_only": false, "value": "2023-08-24T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2170", "record": "WID-SEC-W-2023-2170", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-24T22:00:00Z", "date_only": false, "value": "2023-08-24T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2170", "record": "WID-SEC-W-2023-2170", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-30T12:13:28Z", "date_only": false, "value": "2023-08-30T12:13:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5039", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "8729785f-f9c0-4351-ac18-d33f293775a0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aPOC for Spring Kafka Deserialization Vulnerability CVE-2023-34040\nURL\uff1ahttps://github.com/Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5039"}, {"timestamp": "2023-08-31T10:59:01Z", "date_only": false, "value": "2023-08-31T10:59:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8944", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "a033aeec-b713-49d6-b417-a9222daced56", "content": "#exploit\n1. CVE-2023-39141:\nAria2 WebUI - Path traversal\nhttps://github.com/codeb0ss/CVE-2023-39141-PoC\n\n2. CVE-2023-34040:\nSpring Kafka Deserialization Vulnerability\nhttps://github.com/Contrast-Security-OSS/Spring-Kafka-POC-CVE-2023-34040\n\n3. CVE-2023-26818:\nExploit MacOS TCC Bypass W/ Telegram\nhttps://github.com/Zeyad-Azima/CVE-2023-26818", "url": "https://t.me/CyberSecurityTechnologies/8944"}, {"timestamp": "2023-09-17T20:05:13Z", "date_only": false, "value": "2023-09-17T20:05:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/7779", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "677289c4-55d6-4308-88bd-5dcdbff60eef", "content": "CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution\n\nhttps://pyn3rd.github.io/2023/09/15/CVE-2023-34040-Spring-Kafka-Deserialization-Remote-Code-Execution/", "url": "https://t.me/thebugbountyhunter/7779"}, {"timestamp": "2023-09-18T06:30:08Z", "date_only": false, "value": "2023-09-18T06:30:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/186", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "9accc04d-65a1-4a68-92e5-eef8e7b52f1f", "content": "CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution \n\n\ud83d\udc64 by pyn3rd\n\nIn Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An attacker would have to construct a malicious serialized object in one of the deserialization exception record headers.\n\nThe researcher described in detail the causes of the vulnerability and the method of its exploitation. This is a perfect example of how a vulnerability can be reproduced only based on information from advisory.  \n\n\ud83d\udcdd Contents:\n\u25cf Preface\n\u25cf Concepts of Kafka\n\u25cf Preparation\n\nhttps://pyn3rd.github.io/2023/09/15/CVE-2023-34040-Spring-Kafka-Deserialization-Remote-Code-Execution/", "url": "https://t.me/ptswarm/186"}, {"timestamp": "2023-09-18T07:00:08Z", "date_only": false, "value": "2023-09-18T07:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TopCyberTechNews/367", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "007f8871-b5e7-4479-843c-3b1c8e14fb86", "content": "Top Security News for 18/09/2023\n\nAccount Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation\nhttps://www.reddit.com/r/netsec/comments/16l167p/account_takeover_in_canvas_apps_served_in_comet/ \n\nCVE-2022-32947: macOS GPU-launched kernel privilege escalation exploit (walkthrough slides + demo)\nhttps://www.reddit.com/r/netsec/comments/16kwvfl/cve202232947_macos_gpulaunched_kernel_privilege/ \n\nTickling ksmbd: fuzzing SMB in the Linux kernel\nhttps://www.reddit.com/r/netsec/comments/16kvckv/tickling_ksmbd_fuzzing_smb_in_the_linux_kernel/ \n\nISC Stormcast For Monday, September 18th, 2023 https://isc.sans.edu/podcastdetail/8662, (Mon, Sep 18th)\nhttps://malware.news/t/isc-stormcast-for-monday-september-18th-2023-https-isc-sans-edu-podcastdetail-8662-mon-sep-18th/73542#post_1 \n\nFinancially Motivated UNC3944 Threat Actor Shifts Focus to Ransomware Attacks\nhttps://thehackernews.com/2023/09/financially-motivated-unc3944-threat.html \n\nNorth Korea's Lazarus Group Suspected in $31 Million CoinEx Heist\nhttps://thehackernews.com/2023/09/north-koreas-lazarus-group-suspected-in.html \n\nAccount Takeover in Canvas Apps served in Comet due to failure in Cross-Window-Message Origin validation\nhttps://www.reddit.com/r/netsec/comments/16l167p/account_takeover_in_canvas_apps_served_in_comet/ \n\nClop gang stolen data from major North Carolina hospitals\nhttps://securityaffairs.com/150949/cyber-crime/north-carolina-hospitals-data-breach.html \n\nA Practical Approach to SBOM in CI/CD. Presenting concept of SBOM, its advantages, popular formats and practical implementations for both Java and Python projects.\nhttps://www.reddit.com/r/netsec/comments/16l5vtu/a_practical_approach_to_sbom_in_cicd_presenting/ \n\nCVE-2023-34040 Spring Kafka Deserialization Remote Code Execution\nhttps://www.reddit.com/r/netsec/comments/16kvb77/cve202334040_spring_kafka_deserialization_remote/ \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "url": "https://t.me/TopCyberTechNews/367"}, {"timestamp": "2023-09-29T20:24:24Z", "date_only": false, "value": "2023-09-29T20:24:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1740", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "2597bc1f-0906-4119-b800-3a57239821c9", "content": "CVE-2023-34040\nSpring-Kafka-Deserialization RCE\nPOC\n\n#apacheKafka", "url": "https://t.me/proxy_bar/1740"}, {"timestamp": "2023-09-30T04:24:47Z", "date_only": false, "value": "2023-09-30T04:24:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/4393", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "508f5d52-321b-41f0-9b16-ceea1a571770", "content": "Roundcube CVE-2023-43770 POC : Check\n\nCVE-2023-34040 RCE Exploit : Check\n\nNightmangle: Telegram Command And Control (C2) Agent : Check", "url": "https://t.me/crackcodes/4393"}, {"timestamp": "2023-09-30T04:25:30Z", "date_only": false, "value": "2023-09-30T04:25:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wQTtnJs4bu2qpdkfBduUtEA8WULI7A-GTXrtlXHlEfx64Q", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "23610799-f7be-42a7-87aa-faf4171d473b"}, {"timestamp": "2023-10-07T14:14:27Z", "date_only": false, "value": "2023-10-07T14:14:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/152", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "0ba13787-c3fe-4010-a50a-d9dfea6f58f3", "content": "\u2604\ufe0fCVE-2023-34040\nSpring-Kafka-Deserialization RCE\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC: \nhttps://github.com/pyn3rd/CVE-2023-34040/tree/main", "url": "https://t.me/ap_security/152"}, {"timestamp": "2023-10-07T14:14:27Z", "date_only": false, "value": "2023-10-07T14:14:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ap_security/87", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "adfd14d2-1a0d-4c67-8c9e-d0e8588a25bd", "content": "\u2604\ufe0fCVE-2023-34040\nSpring-Kafka-Deserialization RCE\n\n\ud83d\udce3\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 PoC: \nhttps://github.com/pyn3rd/CVE-2023-34040/tree/main", "url": "https://t.me/ap_security/87"}, {"timestamp": "2023-10-18T17:56:00Z", "date_only": false, "value": "2023-10-18T17:56Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-34040", "record": "GSD-2023-34040", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-22T18:25:06Z", "date_only": false, "value": "2023-10-22T18:25:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ls55OSGyHoJ6JZbLrNh6Nchr_R1rZcPQyoB8EhpT4Czc", "record": "CVE-2023-34040", "field": "creation_timestamp", "uuid": "3787ac3f-9503-4d9c-8217-24efd87eb4cf"}, {"timestamp": "2023-12-13T01:20:30.368Z", "date_only": false, "value": "2023-12-13T01:20:30.368885Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-34040", "record": "GSD-2023-34040", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T23:00:00Z", "date_only": false, "value": "2023-12-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2170", "record": "WID-SEC-W-2023-2170", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-12-18T23:00:00Z", "date_only": false, "value": "2023-12-18T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2170", "record": "WID-SEC-W-2023-2170", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-22T00:00:00Z", "date_only": false, "value": "2023-12-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1055", "record": "CERTFR-2023-AVI-1055", "field": "last_revision_date"}, {"timestamp": "2023-12-22T00:00:00Z", "date_only": false, "value": "2023-12-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1055", "record": "CERTFR-2023-AVI-1055", "field": "initial_release_date"}, {"timestamp": "2023-12-22T00:00:00Z", "date_only": false, "value": "2023-12-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1055", "record": "CERTFR-2023-AVI-1055", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-29T00:00:00Z", "date_only": false, "value": "2023-12-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1062", "record": "CERTFR-2023-AVI-1062", "field": "last_revision_date"}, {"timestamp": "2023-12-29T00:00:00Z", "date_only": false, "value": "2023-12-29T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1062", "record": "CERTFR-2023-AVI-1062", "field": "initial_release_date"}, {"timestamp": "2023-12-29T00:00:00Z", "date_only": false, "value": "2023-12-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-1062", "record": "CERTFR-2023-AVI-1062", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-02T15:54:14.211Z", "date_only": false, "value": "2024-08-02T15:54:14.211Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-34040", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:57:38.125Z", "date_only": false, "value": "2024-08-15T17:57:38.125+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2170", "record": "WID-SEC-W-2023-2170", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-01T15:01:28.194Z", "date_only": false, "value": "2024-10-01T15:01:28.194900Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-34040", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-01T15:01:28.194Z", "date_only": false, "value": "2024-10-01T15:01:28.194900Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34040", "record": "FKIE_CVE-2023-34040", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-01T16:13:52.394Z", "date_only": false, "value": "2024-10-01T16:13:52.394Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-34040", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-01T16:13:52.394Z", "date_only": false, "value": "2024-10-01T16:13:52.394Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-34040", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-05T17:40:34Z", "date_only": false, "value": "2024-11-05T17:40:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CRQF-Q9FP-HWJW", "record": "GHSA-CRQF-Q9FP-HWJW", "field": "modified"}, {"timestamp": "2026-06-17T06:02:46.807Z", "date_only": false, "value": "2026-06-17T06:02:46.807", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34040", "record": "FKIE_CVE-2023-34040", "field": "lastModified"}]}