{"metadata": {"vulnerability": "CVE-2023-39366", "count": 45, "kinds": {"milestone": 8, "sighting": 1, "kev": 0, "other": 36}}, "data": [{"timestamp": "2023-07-28T13:26:46.481Z", "date_only": false, "value": "2023-07-28T13:26:46.481Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-39366", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-05T20:42:12.716Z", "date_only": false, "value": "2023-09-05T20:42:12.716Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-39366", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-05T21:15:00Z", "date_only": false, "value": "2023-09-05T21:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-39366", "record": "UBUNTU-CVE-2023-39366", "field": "published"}, {"timestamp": "2023-09-05T21:15:00Z", "date_only": false, "value": "2023-09-05T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-39366", "record": "GSD-2023-39366", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-05T21:15:46.963Z", "date_only": false, "value": "2023-09-05T21:15:46.963", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39366", "record": "FKIE_CVE-2023-39366", "field": "published"}, {"timestamp": "2023-09-05T22:00:00Z", "date_only": false, "value": "2023-09-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-05T22:00:00Z", "date_only": false, "value": "2023-09-05T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-05T22:00:00Z", "date_only": false, "value": "2023-09-05T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-06T00:17:31Z", "date_only": false, "value": "2023-09-06T00:17:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/69911", "record": "CVE-2023-39366", "field": "creation_timestamp", "uuid": "906470be-6a00-44b5-89eb-54e27544d2bc", "content": "\u203c CVE-2023-39366 \u203c\n\nCacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerability allows an authenticated user to poison data stored in the _cacti_'s database. These data will be viewed by administrative _cacti_ accounts and execute JavaScript code in the victim's browser at view-time. The `data_sources.php` script displays the data source management information (e.g. data source path, polling configuration etc.) for different data visualizations of the _cacti_ app. CENSUS found that an adversary that is able to configure a malicious Device name, can deploy a stored XSS attack against any user of the same (or broader) privileges. A user that possesses the _General Administration>Sites/Devices/Data_ permissions can configure the device names in _cacti_. This configuration occurs through `http:///cacti/host.php`, while the rendered malicious payload is exhibited at `http:///cacti/data_sources.php`. This vulnerability has been addressed in version 1.2.25. Users are advised to upgrade. Users unable to update should manually filter HTML output.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/69911"}, {"timestamp": "2023-09-06T22:00:00Z", "date_only": false, "value": "2023-09-06T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-09-26T13:31:33Z", "date_only": false, "value": "2023-09-26T13:31:33Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0275-1", "record": "OPENSUSE-SU-2023:0275-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-26T13:31:33Z", "date_only": false, "value": "2023-09-26T13:31:33Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0275-1", "record": "OPENSUSE-SU-2023:0275-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-09-26T13:31:33Z", "date_only": false, "value": "2023-09-26T13:31:33Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0275-1", "record": "OPENSUSE-SU-2023:0275-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-09-26T13:31:33Z", "date_only": false, "value": "2023-09-26T13:31:33Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0275-1", "record": "OPENSUSE-SU-2023:0275-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-03T22:00:00Z", "date_only": false, "value": "2023-10-03T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-10-08T22:00:00Z", "date_only": false, "value": "2023-10-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-10-09T22:00:00Z", "date_only": false, "value": "2023-10-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-10-24T22:00:00Z", "date_only": false, "value": "2023-10-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-11-08T23:00:00Z", "date_only": false, "value": "2023-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-11-09T05:06:18.428Z", "date_only": false, "value": "2023-11-09T05:06:18.428Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-39366", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-09T05:15:00Z", "date_only": false, "value": "2023-11-09T05:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-39366", "record": "GSD-2023-39366", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:33.222Z", "date_only": false, "value": "2023-12-13T01:20:33.222489Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-39366", "record": "GSD-2023-39366", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-18T23:00:00Z", "date_only": false, "value": "2024-03-18T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2024-03-24T23:00:00Z", "date_only": false, "value": "2024-03-24T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2024-04-02T22:00:00Z", "date_only": false, "value": "2024-04-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13203-1", "record": "OPENSUSE-SU-2024:13203-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13203-1", "record": "OPENSUSE-SU-2024:13203-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13203-1", "record": "OPENSUSE-SU-2024:13203-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13203-1", "record": "OPENSUSE-SU-2024:13203-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-02T18:10:20.269Z", "date_only": false, "value": "2024-08-02T18:10:20.269Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-39366", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-26T19:20:41.959Z", "date_only": false, "value": "2024-09-26T19:20:41.959733Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-39366", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-26T19:20:41.959Z", "date_only": false, "value": "2024-09-26T19:20:41.959733Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39366", "record": "FKIE_CVE-2023-39366", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-26T19:39:54.617Z", "date_only": false, "value": "2024-09-26T19:39:54.617Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-39366", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-08T23:00:00Z", "date_only": false, "value": "2024-12-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2024-12-08T23:00:00Z", "date_only": false, "value": "2024-12-08T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-09T09:21:46.078Z", "date_only": false, "value": "2024-12-09T09:21:46.078+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2275", "record": "WID-SEC-W-2023-2275", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-13T17:03:01.901Z", "date_only": false, "value": "2025-02-13T17:03:01.901Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-39366", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-24T05:02:13Z", "date_only": false, "value": "2025-10-24T05:02:13Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-39366", "record": "UBUNTU-CVE-2023-39366", "field": "modified"}, {"timestamp": "2026-06-17T06:12:09.287Z", "date_only": false, "value": "2026-06-17T06:12:09.287", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-39366", "record": "FKIE_CVE-2023-39366", "field": "lastModified"}, {"timestamp": "2026-09-20T19:46:40Z", "date_only": false, "value": "2026-09-20T19:46:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0275-1", "record": "OPENSUSE-SU-2023:0275-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:46:40Z", "date_only": false, "value": "2026-09-20T19:46:40Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0275-1", "record": "OPENSUSE-SU-2023:0275-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:56:07Z", "date_only": false, "value": "2026-09-20T20:56:07Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13203-1", "record": "OPENSUSE-SU-2024:13203-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:56:07Z", "date_only": false, "value": "2026-09-20T20:56:07Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13203-1", "record": "OPENSUSE-SU-2024:13203-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-30T19:39:40.815Z", "date_only": false, "value": "2026-09-30T19:39:40.815891Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2024-TY38710", "record": "CLEANSTART-2024-TY38710", "field": "published"}, {"timestamp": "2026-10-08T14:25:11Z", "date_only": false, "value": "2026-10-08T14:25:11Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2024-TY38710", "record": "CLEANSTART-2024-TY38710", "field": "modified"}]}