{"metadata": {"vulnerability": "CVE-2023-35985", "count": 33, "kinds": {"milestone": 6, "sighting": 6, "kev": 0, "other": 21}}, "data": [{"timestamp": "2023-08-15T20:00:03.273Z", "date_only": false, "value": "2023-08-15T20:00:03.273Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-35985", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-22T00:00:00Z", "date_only": false, "value": "2023-11-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0972", "record": "CERTFR-2023-AVI-0972", "field": "last_revision_date"}, {"timestamp": "2023-11-22T00:00:00Z", "date_only": false, "value": "2023-11-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0972", "record": "CERTFR-2023-AVI-0972", "field": "initial_release_date"}, {"timestamp": "2023-11-22T00:00:00Z", "date_only": false, "value": "2023-11-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0972", "record": "CERTFR-2023-AVI-0972", "field": "revisions.0.revision_date"}, {"timestamp": "2023-11-22T23:00:00Z", "date_only": false, "value": "2023-11-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2996", "record": "WID-SEC-W-2023-2996", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-22T23:00:00Z", "date_only": false, "value": "2023-11-22T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2996", "record": "WID-SEC-W-2023-2996", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-22T23:00:00Z", "date_only": false, "value": "2023-11-22T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2996", "record": "WID-SEC-W-2023-2996", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-11-27T15:25:11.052Z", "date_only": false, "value": "2023-11-27T15:25:11.052Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-35985", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-27T16:15:00Z", "date_only": false, "value": "2023-11-27T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-35985", "record": "GSD-2023-35985", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-11-27T16:15:09Z", "date_only": false, "value": "2023-11-27T16:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9GJ5-Q54R-HCPR", "record": "GHSA-9GJ5-Q54R-HCPR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-27T16:15:09.460Z", "date_only": false, "value": "2023-11-27T16:15:09.460", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35985", "record": "FKIE_CVE-2023-35985", "field": "published"}, {"timestamp": "2023-11-27T18:00:06.987Z", "date_only": false, "value": "2023-11-27T18:00:06.987Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / talos", "record": "CVE-2023-35985", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-27T18:31:13Z", "date_only": false, "value": "2023-11-27T18:31:13Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9GJ5-Q54R-HCPR", "record": "GHSA-9GJ5-Q54R-HCPR", "field": "published"}, {"timestamp": "2023-11-30T00:00:00Z", "date_only": true, "value": "2023-11-30", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-96090", "record": "CNVD-2023-96090", "field": "submitTime"}, {"timestamp": "2023-12-01T20:55:00Z", "date_only": false, "value": "2023-12-01T20:55Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-35985", "record": "GSD-2023-35985", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-08T00:00:00Z", "date_only": true, "value": "2023-12-08", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-96090", "record": "CNVD-2023-96090", "field": "openTime"}, {"timestamp": "2023-12-13T01:20:46.391Z", "date_only": false, "value": "2023-12-13T01:20:46.391052Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-35985", "record": "GSD-2023-35985", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-20T23:00:00Z", "date_only": false, "value": "2023-12-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2996", "record": "WID-SEC-W-2023-2996", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-12-20T23:00:00Z", "date_only": false, "value": "2023-12-20T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2996", "record": "WID-SEC-W-2023-2996", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-30T06:36:50Z", "date_only": false, "value": "2023-12-30T06:36:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6338", "record": "CVE-2023-35985", "field": "creation_timestamp", "uuid": "dce20641-bde6-423e-a884-0c26ca68cbdf", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a CVE-2023-35985 reproduction\nURL\uff1ahttps://github.com/SpiralBL0CK/-CVE-2023-35985\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6338"}, {"timestamp": "2023-12-31T00:45:20Z", "date_only": false, "value": "2023-12-31T00:45:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9688", "record": "CVE-2023-35985", "field": "creation_timestamp", "uuid": "74a889c8-91b2-4412-8aff-f7017b83286e", "content": "#exploit\n1. CVE-2023-51467:\nApache OfBiz Auth Bypass\nhttps://github.com/JaneMandy/CVE-2023-51467\n]-> scanner: https://github.com/Chocapikk/CVE-2023-51467\n\n2. Remote pre-auth heap buffer overflow exploit for Avocent KVMs\nhttps://gist.github.com/aemmitt-ns/f76e770c9112faae86bf93fe223a497e\n\n3. CVE-2023-35985:\nAPI of Foxit Reader\u00a012.x - Arbitrary file creation vulnerability\nhttps://github.com/SpiralBL0CK/-CVE-2023-35985", "url": "https://t.me/CyberSecurityTechnologies/9688"}, {"timestamp": "2023-12-31T03:56:49Z", "date_only": false, "value": "2023-12-31T03:56:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/2290", "record": "CVE-2023-35985", "field": "creation_timestamp", "uuid": "b4015c0b-7f64-4da3-999e-676762856f79", "content": "#ExploitObserverAlert\n\nCVE-2023-35985\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-35985. An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dangerous extension. A specially crafted malicious file can create files at arbitrary locations, which can lead to arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially-crafted malicious site if the browser plugin extension is enabled.\n\nFIRST-EPSS: 0.001540000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/2290"}, {"timestamp": "2024-01-01T10:15:16Z", "date_only": false, "value": "2024-01-01T10:15:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackerOne/3607", "record": "CVE-2023-35985", "field": "creation_timestamp", "uuid": "f55e57a8-73d5-4da7-8535-0d343c6c42fd", "content": "https://github.com/SpiralBL0CK/-CVE-2023-35985\n\n1-day exploit", "url": "https://t.me/HackerOne/3607"}, {"timestamp": "2024-08-15T18:02:01.078Z", "date_only": false, "value": "2024-08-15T18:02:01.078+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2996", "record": "WID-SEC-W-2023-2996", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-21T20:14:29.444Z", "date_only": false, "value": "2024-11-21T20:14:29.444528Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-35985", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-11-21T20:14:29.444Z", "date_only": false, "value": "2024-11-21T20:14:29.444528Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35985", "record": "FKIE_CVE-2023-35985", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-11-21T20:14:58.355Z", "date_only": false, "value": "2024-11-21T20:14:58.355Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-35985", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T19:17:06.076Z", "date_only": false, "value": "2025-11-04T19:17:06.076Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-35985", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T19:17:06.076Z", "date_only": false, "value": "2025-11-04T19:17:06.076Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-35985", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T21:30:48Z", "date_only": false, "value": "2025-11-04T21:30:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9GJ5-Q54R-HCPR", "record": "GHSA-9GJ5-Q54R-HCPR", "field": "modified"}, {"timestamp": "2026-06-17T06:05:36.383Z", "date_only": false, "value": "2026-06-17T06:05:36.383", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-35985", "record": "FKIE_CVE-2023-35985", "field": "lastModified"}, {"timestamp": "2026-07-17T11:00:06.720Z", "date_only": false, "value": "2026-07-17T11:00:06.720413Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/250", "record": "CVE-2023-35985", "field": "creation_timestamp", "uuid": "5eef35ed-c6b0-49f2-b7f8-41662931c5fb", "url": "https://t.me/cyberwarehouse/250"}, {"timestamp": "2026-07-18T00:00:28.949Z", "date_only": false, "value": "2026-07-18T00:00:28.949738Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/250", "record": "CVE-2023-35985", "field": "creation_timestamp", "uuid": "991b85f6-e2cc-4865-883b-71ce26b8226b", "url": "https://t.me/cyberwarehouse/250"}]}