{"metadata": {"vulnerability": "CVE-2023-34478", "count": 41, "kinds": {"milestone": 8, "sighting": 3, "kev": 0, "other": 30}}, "data": [{"timestamp": "2023-06-07T18:50:06.956Z", "date_only": false, "value": "2023-06-07T18:50:06.956Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-34478", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-07-24T00:00:00Z", "date_only": true, "value": "2023-07-24", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-34478", "record": "GSD-2023-34478", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-07-24T18:24:45.619Z", "date_only": false, "value": "2023-07-24T18:24:45.619Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-34478", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-07-24T19:15:00Z", "date_only": false, "value": "2023-07-24T19:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-34478", "record": "UBUNTU-CVE-2023-34478", "field": "published"}, {"timestamp": "2023-07-24T19:15:00Z", "date_only": false, "value": "2023-07-24T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-34478", "record": "GSD-2023-34478", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-07-24T19:15:10Z", "date_only": false, "value": "2023-07-24T19:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PMHC-2G4F-85CG", "record": "GHSA-PMHC-2G4F-85CG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-07-24T19:15:10.630Z", "date_only": false, "value": "2023-07-24T19:15:10.630", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34478", "record": "FKIE_CVE-2023-34478", "field": "published"}, {"timestamp": "2023-07-24T21:30:39Z", "date_only": false, "value": "2023-07-24T21:30:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PMHC-2G4F-85CG", "record": "GHSA-PMHC-2G4F-85CG", "field": "published"}, {"timestamp": "2023-07-24T22:26:15Z", "date_only": false, "value": "2023-07-24T22:26:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/67180", "record": "CVE-2023-34478", "field": "creation_timestamp", "uuid": "64fd32e4-6492-4cf8-8aae-d607d0c33f88", "content": "\u203c CVE-2023-34478 \u203c\n\nApache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests.Mitigation:\u00c2\u00a0Update to Apache Shiro 1.12.0+ or 2.0.0-alpha-3+\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/67180"}, {"timestamp": "2023-07-30T00:00:00Z", "date_only": true, "value": "2023-07-30", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-70281", "record": "CNVD-2023-70281", "field": "submitTime"}, {"timestamp": "2023-08-01T00:00:00Z", "date_only": true, "value": "2023-08-01", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-34478", "record": "GSD-2023-34478", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-09-15T13:06:33.543Z", "date_only": false, "value": "2023-09-15T13:06:33.543Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2023-34478", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-09-15T14:15:00Z", "date_only": false, "value": "2023-09-15T14:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-34478", "record": "GSD-2023-34478", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-09-20T00:00:00Z", "date_only": true, "value": "2023-09-20", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-70281", "record": "CNVD-2023-70281", "field": "openTime"}, {"timestamp": "2023-12-13T01:20:30.638Z", "date_only": false, "value": "2023-12-13T01:20:30.638916Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-34478", "record": "GSD-2023-34478", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-04T23:00:00Z", "date_only": false, "value": "2024-03-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0543", "record": "WID-SEC-W-2024-0543", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-03-04T23:00:00Z", "date_only": false, "value": "2024-03-04T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0543", "record": "WID-SEC-W-2024-0543", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-03-04T23:00:00Z", "date_only": false, "value": "2024-03-04T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0543", "record": "WID-SEC-W-2024-0543", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-03-05T23:00:00Z", "date_only": false, "value": "2024-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0543", "record": "WID-SEC-W-2024-0543", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-03-06T23:00:00Z", "date_only": false, "value": "2024-03-06T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0543", "record": "WID-SEC-W-2024-0543", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-03-06T23:00:00Z", "date_only": false, "value": "2024-03-06T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0543", "record": "WID-SEC-W-2024-0543", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-03-08T00:00:00Z", "date_only": false, "value": "2024-03-08T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0199", "record": "CERTFR-2024-AVI-0199", "field": "last_revision_date"}, {"timestamp": "2024-03-08T00:00:00Z", "date_only": false, "value": "2024-03-08T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0199", "record": "CERTFR-2024-AVI-0199", "field": "initial_release_date"}, {"timestamp": "2024-03-08T00:00:00Z", "date_only": false, "value": "2024-03-08T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0199", "record": "CERTFR-2024-AVI-0199", "field": "revisions.0.revision_date"}, {"timestamp": "2024-04-15T22:00:00Z", "date_only": false, "value": "2024-04-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0862", "record": "WID-SEC-W-2024-0862", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-04-15T22:00:00Z", "date_only": false, "value": "2024-04-15T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0862", "record": "WID-SEC-W-2024-0862", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-04-15T22:00:00Z", "date_only": false, "value": "2024-04-15T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0862", "record": "WID-SEC-W-2024-0862", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-08-02T16:10:07.042Z", "date_only": false, "value": "2024-08-02T16:10:07.042Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-34478", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:06:03.491Z", "date_only": false, "value": "2024-08-15T18:06:03.491+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0543", "record": "WID-SEC-W-2024-0543", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-02T18:25:43.914Z", "date_only": false, "value": "2024-10-02T18:25:43.914210Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-34478", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-10-02T18:25:43.914Z", "date_only": false, "value": "2024-10-02T18:25:43.914210Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34478", "record": "FKIE_CVE-2023-34478", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-10-02T18:29:59.782Z", "date_only": false, "value": "2024-10-02T18:29:59.782Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-34478", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-14T22:00:00Z", "date_only": false, "value": "2024-10-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0862", "record": "WID-SEC-W-2024-0862", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-10-14T22:00:00Z", "date_only": false, "value": "2024-10-14T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0862", "record": "WID-SEC-W-2024-0862", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-10-15T08:14:54.391Z", "date_only": false, "value": "2024-10-15T08:14:54.391+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0862", "record": "WID-SEC-W-2024-0862", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-13T16:55:37.269Z", "date_only": false, "value": "2025-02-13T16:55:37.269Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-34478", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-13T19:01:43Z", "date_only": false, "value": "2025-02-13T19:01:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PMHC-2G4F-85CG", "record": "GHSA-PMHC-2G4F-85CG", "field": "modified"}, {"timestamp": "2025-02-13T19:20:10Z", "date_only": false, "value": "2025-02-13T19:20:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4326", "record": "CVE-2023-34478", "field": "creation_timestamp", "uuid": "f561abce-f62d-4031-bfd1-d9dcc22ad8ab", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-34478\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests.\n\nMitigation:\u00a0Update to Apache Shiro 1.12.0+ or 2.0.0-alpha-3+\n\ud83d\udccf Published: 2023-07-24T21:30:39Z\n\ud83d\udccf Modified: 2025-02-13T19:01:43Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-34478\n2. https://github.com/apache/shiro/commit/c3ede3f94efb442acb0795714a022c2c121d1da0\n3. https://github.com/apache/shiro\n4. https://lists.apache.org/thread/mbv26onkgw9o35rldh7vmq11wpv2t2qk\n5. https://security.netapp.com/advisory/ntap-20230915-0005\n6. http://www.openwall.com/lists/oss-security/2023/07/24/4", "url": "https://t.me/DarkWebInformer_CVEAlerts/4326"}, {"timestamp": "2025-08-18T21:02:48.556Z", "date_only": false, "value": "2025-08-18T21:02:48.556948Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcbpffyy2b", "record": "CVE-2023-34478", "field": "creation_timestamp", "uuid": "1a519f8d-cd34-4d80-87e1-e9d06b0dc944", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcbpffyy2b"}, {"timestamp": "2026-01-20T05:10:09Z", "date_only": false, "value": "2026-01-20T05:10:09Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-34478", "record": "UBUNTU-CVE-2023-34478", "field": "modified"}, {"timestamp": "2026-06-17T06:03:44.157Z", "date_only": false, "value": "2026-06-17T06:03:44.157", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-34478", "record": "FKIE_CVE-2023-34478", "field": "lastModified"}]}