{"metadata": {"vulnerability": "CVE-2023-38836", "count": 39, "kinds": {"milestone": 4, "sighting": 23, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-07-25T00:00:00Z", "date_only": false, "value": "2023-07-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-38836", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-17T07:09:39Z", "date_only": false, "value": "2023-08-17T07:09:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/886", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "e5c5228a-744f-4de7-bfe1-ea6b998bce88", "content": "https://github.com/1337kid/CVE-2023-38836\nBoidCMS\n#github", "url": "https://t.me/CNArsenal/886", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-17T12:25:33Z", "date_only": false, "value": "2023-08-17T12:25:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8865", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "12f5f01e-1462-4009-9cd7-ca22a0fa2dae", "content": "#exploit\n1. CVE-2023-3079:\nType confusion in V8 in Google Chrome\nhttps://github.com/mistymntncop/CVE-2023-3079\n\n2. CVE-2023-38836:\nExploit for file upload vulnerability in BoidCMS <=2.0.0\nhttps://github.com/1337kid/CVE-2023-38836", "url": "https://t.me/CyberSecurityTechnologies/8865", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-18T17:23:51Z", "date_only": false, "value": "2023-08-18T17:23:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/v3n0mhack/269", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "b3b1f96a-f21e-482e-a1b7-818d6b7196c9", "content": "Exploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nhttps://github.com/1337kid/CVE-2023-38836", "url": "https://t.me/v3n0mhack/269", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-18T17:41:52Z", "date_only": false, "value": "2023-08-18T17:41:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/2963", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "5bd887e5-7d34-40bb-8708-ab6ae2d3be2f", "content": "Exploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nhttps://github.com/1337kid/CVE-2023-38836", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/2963", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-18T17:51:01Z", "date_only": false, "value": "2023-08-18T17:51:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingVidhya/288", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "c21bd240-7884-4705-987c-e35255a8adc1", "content": "Exploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nhttps://github.com/1337kid/CVE-2023-38836", "url": "https://t.me/HackingVidhya/288", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-19T19:31:02Z", "date_only": false, "value": "2023-08-19T19:31:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dbvuxNNZ-8bCv4RZf6xv5uwDtZ_cnVdQB-PXidN-Enzi", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "c68ef29f-45d8-48a2-baa0-516af04b306a", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-19T21:31:05Z", "date_only": false, "value": "2023-08-19T21:31:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/black_69_here/137", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "f957bf18-cdd2-434c-babe-df472e0fd272", "content": "CVE-2023-38836 \u2705\n\nExploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nusage: exp.py [-h] [-u URL] [-l USER] [-p PASSWD]\n\nExploit for CVE-2023-38836\n\noptions:\n  -h, --help            show this help message and exit\n  -u URL,\n --url URL  website url\n  -l USER, \n--user USER  admin username\n  -p PASSWD,\n --passwd PASSWD\n  admin password\n\n\nJoin : @flash_kiss", "url": "https://t.me/black_69_here/137", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-19T21:31:05Z", "date_only": false, "value": "2023-08-19T21:31:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/error_troops/276", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "28001f5b-583d-4145-adb2-d799cfd5f260", "content": "CVE-2023-38836 \u2705\n\nExploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nusage: exp.py [-h] [-u URL] [-l USER] [-p PASSWD]\n\nExploit for CVE-2023-38836\n\noptions:\n  -h, --help            show this help message and exit\n  -u URL,\n --url URL  website url\n  -l USER, \n--user USER  admin username\n  -p PASSWD,\n --passwd PASSWD\n  admin password\n\n\nJoin : @flash_kiss", "url": "https://t.me/error_troops/276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-19T21:31:05Z", "date_only": false, "value": "2023-08-19T21:31:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ev1l_store/406", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "533a3aef-5828-4ec4-a9b9-91d5d24d16f3", "content": "CVE-2023-38836 \u2705\n\nExploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nusage: exp.py [-h] [-u URL] [-l USER] [-p PASSWD]\n\nExploit for CVE-2023-38836\n\noptions:\n  -h, --help            show this help message and exit\n  -u URL,\n --url URL  website url\n  -l USER, \n--user USER  admin username\n  -p PASSWD,\n --passwd PASSWD\n  admin password\n\n\nJoin : @flash_kiss", "url": "https://t.me/ev1l_store/406", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-19T21:31:05Z", "date_only": false, "value": "2023-08-19T21:31:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ev1l_store/958", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "99e2aded-d2d3-4e45-a532-9ae3438a0e94", "content": "CVE-2023-38836 \u2705\n\nExploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nusage: exp.py [-h] [-u URL] [-l USER] [-p PASSWD]\n\nExploit for CVE-2023-38836\n\noptions:\n  -h, --help            show this help message and exit\n  -u URL,\n --url URL  website url\n  -l USER, \n--user USER  admin username\n  -p PASSWD,\n --passwd PASSWD\n  admin password\n\n\nJoin : @flash_kiss", "url": "https://t.me/ev1l_store/958", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-20T02:05:27Z", "date_only": false, "value": "2023-08-20T02:05:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BhinnekaSec/485", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "264211c8-e003-41b4-8924-a49bca289f4e", "content": "CVE-2023-38836 \u2705\n\nExploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nusage: exp.py [-h] [-u URL] [-l USER] [-p PASSWD]\n\nExploit for CVE-2023-38836\n\noptions:\n  -h, --help            show this help message and exit\n  -u URL,\n --url URL  website url\n  -l USER, \n--user USER  admin username\n  -p PASSWD,\n --passwd PASSWD\n  admin password\n\n\nJoin : @flash_kiss", "url": "https://t.me/BhinnekaSec/485", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-08-21T17:15:00Z", "date_only": false, "value": "2023-08-21T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-38836", "record": "GSD-2023-38836", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-08-21T17:15:47Z", "date_only": false, "value": "2023-08-21T17:15:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QFPW-PJFH-H5G5", "record": "GHSA-QFPW-PJFH-H5G5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-08-21T17:15:47.633Z", "date_only": false, "value": "2023-08-21T17:15:47.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-38836", "record": "FKIE_CVE-2023-38836", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-08-21T18:31:23Z", "date_only": false, "value": "2023-08-21T18:31:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QFPW-PJFH-H5G5", "record": "GHSA-QFPW-PJFH-H5G5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-08-21T20:41:11Z", "date_only": false, "value": "2023-08-21T20:41:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/68895", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "e2a14654-e5a6-4bb0-a122-8aa95c05f5fa", "content": "\u203c CVE-2023-38836 \u203c\n\nFile Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code via the GIF header component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/68895"}, {"timestamp": "2023-09-08T09:52:14Z", "date_only": false, "value": "2023-09-08T09:52:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Redscriptteam/1192", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "37aadb27-333e-4918-9472-86e614df4765", "content": "CVE-2023-38836 \u2705\n\nExploit for file upload vulnerability in BoidCMS version <=2.0.0\n\nusage: exp.py [-h] [-u URL] [-l USER] [-p PASSWD]\n\nExploit for CVE-2023-38836\n\noptions:\n\u00a0 -h, --help\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 show this help message and exit\n\u00a0 -u URL, --url URL\u00a0\u00a0\u00a0\u00a0 website url\n\u00a0 -l USER, --user USER\u00a0 admin username\n\u00a0 -p PASSWD, --passwd PASSWD\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 admin password\n\n\nJoin : @vpn809", "url": "https://t.me/Redscriptteam/1192", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-10T17:15:00Z", "date_only": false, "value": "2023-10-10T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-38836", "record": "GSD-2023-38836", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-12-13T01:20:36.005Z", "date_only": false, "value": "2023-12-13T01:20:36.005299Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-38836", "record": "GSD-2023-38836", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-03-01T05:48:56Z", "date_only": false, "value": "2024-03-01T05:48:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cve_2023_38836_boidcms.rb", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "a61335c1-aab4-487a-bf67-bf3730bcd1e5", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/cve_2023_38836_boidcms.rb"}, {"timestamp": "2024-03-02T06:07:07Z", "date_only": false, "value": "2024-03-02T06:07:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arpsyndicate/4111", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "05186d46-9de1-4ae3-98be-2012ce9977c8", "content": "#ExploitObserverAlert\n\nMSF/exploit_multi/http/cve_2023_38836_boidcms\n\nDESCRIPTION: Exploit Observer has 8 entries in 6 file formats related to MSF/exploit_multi/http/cve_2023_38836_boidcms. This module leverages CVE-2023-38836, an improper sanitization bug in BoidCMS version 2.0.0 and below. BoidCMS allows the authenticated upload of a php file as media if the file has the GIF header, even if the file is a php file.", "url": "https://t.me/arpsyndicate/4111", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-04T07:05:00Z", "date_only": false, "value": "2024-04-04T07:05:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QFPW-PJFH-H5G5", "record": "GHSA-QFPW-PJFH-H5G5", "field": "modified", "linked_record": true}, {"timestamp": "2024-05-10T18:34:07Z", "date_only": false, "value": "2024-05-10T18:34:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/openSource3/108", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "3156b836-7e5b-4a17-9f38-58add8800c4e", "content": "CVE ID : CVE-2023-38836\nSystem : BoidCMS v.2.0.0\nType : \ud80c\udda3 file upload \ud80c\udda3 \n\nExploiting\n\u0637\u0631\u064a\u0642\u0629 \u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 :\n\npython3 CVE-2023-38836.py", "url": "https://t.me/openSource3/108", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-05-29T20:08:08Z", "date_only": false, "value": "2024-05-29T20:08:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Oq35BKxnuTzPcMnyUvXmy463sPzD13heVJzjGMfN9RaKXa4m", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "9c3e40e0-e50b-450d-a2aa-3ccb568ba5a5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-06-19T01:30:22Z", "date_only": false, "value": "2024-06-19T01:30:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Teamx1945x/8016", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "6c10cc84-ab54-4ea2-acbd-29818f321fa1", "content": "CVE ID : CVE-2023-38836\nSystem : BoidCMS v.2.0.0\nType : \ud80c\udda3 file upload \ud80c\udda3 \n\nExploiting\n\u0637\u0631\u064a\u0642\u0629 \u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 :\n\npython3 CVE-2023-38836.py", "url": "https://t.me/Teamx1945x/8016", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-10-07T17:08:25.330Z", "date_only": false, "value": "2024-10-07T17:08:25.330209Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-38836", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-10-07T17:08:25.330Z", "date_only": false, "value": "2024-10-07T17:08:25.330209Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-38836", "record": "FKIE_CVE-2023-38836", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-10-07T17:08:40.086Z", "date_only": false, "value": "2024-10-07T17:08:40.086Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-38836", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "aadca511-8e50-4644-a55c-6d57e0780bc4"}, {"timestamp": "2025-02-23T04:10:56Z", "date_only": false, "value": "2025-02-23T04:10:56.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "0cc9e447-034c-4949-9e05-f7c95cb74d1c"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "52d72187-49a3-4738-ab3c-2131628eade6"}, {"timestamp": "2026-07-05T00:31:32.395Z", "date_only": false, "value": "2026-07-05T00:31:32.395Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2023-38836", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:27:08.679Z", "date_only": false, "value": "2026-07-09T00:27:08.679Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-38836", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:27:08.679Z", "date_only": false, "value": "2026-07-09T00:27:08.679Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-38836", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T01:18:32.120Z", "date_only": false, "value": "2026-07-09T01:18:32.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-38836", "record": "FKIE_CVE-2023-38836", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:00:06.663Z", "date_only": false, "value": "2026-07-29T12:00:06.663502Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/19188", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "4a3c7372-54ae-4727-9227-3320adc8540a", "url": "https://t.me/CVEhub/19188"}, {"timestamp": "2026-07-30T00:00:25.114Z", "date_only": false, "value": "2026-07-30T00:00:25.114975Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/19188", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "30119a70-e5dc-4da2-8b86-2e2a40b64007", "url": "https://t.me/CVEhub/19188", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-11T08:58:43.195Z", "anchors": {"origin": {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-08-17T07:09:39Z", "date_only": false, "value": "2023-08-17T07:09:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/886", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "e5c5228a-744f-4de7-bfe1-ea6b998bce88", "content": "https://github.com/1337kid/CVE-2023-38836\nBoidCMS\n#github", "url": "https://t.me/CNArsenal/886", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -319821.0, "hours": -88.83916666666667, "days": -3.7016319444444443, "min_seconds": -406221.0, "max_seconds": -319821.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-08-17T07:09:39Z", "date_only": false, "value": "2023-08-17T07:09:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/886", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "e5c5228a-744f-4de7-bfe1-ea6b998bce88", "content": "https://github.com/1337kid/CVE-2023-38836\nBoidCMS\n#github", "url": "https://t.me/CNArsenal/886", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 101811523.195293, "hours": 28280.978665359165, "days": 1178.3741110566318, "min_seconds": 101725123.195293, "max_seconds": 101811523.195293, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-08-21T00:00:00Z", "date_only": false, "value": "2023-08-21T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-38836", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T08:58:43.195Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 102131344.195293, "hours": 28369.81783202583, "days": 1182.0757430010763, "min_seconds": 102131344.195293, "max_seconds": 102131344.195293, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-08-17T07:09:39Z", "date_only": false, "value": "2023-08-17T07:09:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/886", "record": "CVE-2023-38836", "field": "creation_timestamp", "uuid": "e5c5228a-744f-4de7-bfe1-ea6b998bce88", "content": "https://github.com/1337kid/CVE-2023-38836\nBoidCMS\n#github", "url": "https://t.me/CNArsenal/886", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T08:58:43.195Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}