{"metadata": {"vulnerability": "CVE-2023-42498", "count": 32, "kinds": {"milestone": 9, "sighting": 5, "kev": 0, "other": 18}}, "data": [{"timestamp": "2023-09-11T08:54:24.312Z", "date_only": false, "value": "2023-09-11T08:54:24.312Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-42498", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:21.523Z", "date_only": false, "value": "2023-12-13T01:20:21.523799Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-42498", "record": "GSD-2023-42498", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-02-20T23:00:00Z", "date_only": false, "value": "2024-02-20T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0440", "record": "WID-SEC-W-2024-0440", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-02-20T23:00:00Z", "date_only": false, "value": "2024-02-20T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0440", "record": "WID-SEC-W-2024-0440", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-02-20T23:00:00Z", "date_only": false, "value": "2024-02-20T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0440", "record": "WID-SEC-W-2024-0440", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2024-02-20T23:00:00Z", "date_only": false, "value": "2024-02-20T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0440", "record": "WID-SEC-W-2024-0440", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-02-21T02:47:45.261Z", "date_only": false, "value": "2024-02-21T02:47:45.261Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-42498", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-02-21T02:47:45.261Z", "date_only": false, "value": "2024-02-21T02:47:45.261Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Liferay", "record": "CVE-2023-42498", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-02-21T03:15:08Z", "date_only": false, "value": "2024-02-21T03:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-73X3-8MRG-5R93", "record": "GHSA-73X3-8MRG-5R93", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-02-21T03:15:08.240Z", "date_only": false, "value": "2024-02-21T03:15:08.240", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-42498", "record": "FKIE_CVE-2023-42498", "field": "published"}, {"timestamp": "2024-02-21T03:15:08.240Z", "date_only": false, "value": "2024-02-21T03:15:08.240", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-42498", "record": "GSD-2023-42498", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-02-21T03:30:37Z", "date_only": false, "value": "2024-02-21T03:30:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-73X3-8MRG-5R93", "record": "GHSA-73X3-8MRG-5R93", "field": "published"}, {"timestamp": "2024-02-21T04:21:42Z", "date_only": false, "value": "2024-02-21T04:21:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/189170", "record": "CVE-2023-42498", "field": "creation_timestamp", "uuid": "c83384c6-a99a-4dc4-a68d-f5f5b67cdf8c", "content": "https://ift.tt/QA24a7G\nCVE-2023-42498", "url": "https://t.me/ctinow/189170"}, {"timestamp": "2024-02-21T04:26:11Z", "date_only": false, "value": "2024-02-21T04:26:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/189178", "record": "CVE-2023-42498", "field": "creation_timestamp", "uuid": "329cf1bd-d0ab-4ceb-9f61-8b57911e0243", "content": "https://ift.tt/QA24a7G\nCVE-2023-42498", "url": "https://t.me/ctinow/189178"}, {"timestamp": "2024-02-22T04:31:03Z", "date_only": false, "value": "2024-02-22T04:31:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3934", "record": "CVE-2023-42498", "field": "creation_timestamp", "uuid": "96d04a18-1182-4ca4-aa29-9074e77abe73", "content": "#ExploitObserverAlert\n\nCVE-2023-42498\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2023-42498. Reflected cross-site scripting (XSS) vulnerability in the Language Override edit screen in Liferay Portal 7.4.3.8 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 4 through 92 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_portal_language_override_web_internal_portlet_PLOPortlet_key parameter.\n\nFIRST-EPSS: 0.000430000", "url": "https://t.me/arpsyndicate/3934"}, {"timestamp": "2024-02-22T19:07:37.840Z", "date_only": false, "value": "2024-02-22T19:07:37.840", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-42498", "record": "GSD-2023-42498", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-26T17:54:30.386Z", "date_only": false, "value": "2024-02-26T17:54:30.386431Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-42498", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2024-02-26T17:54:30.386Z", "date_only": false, "value": "2024-02-26T17:54:30.386431Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-42498", "record": "FKIE_CVE-2023-42498", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-04T17:25:12.034Z", "date_only": false, "value": "2024-06-04T17:25:12.034Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-42498", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T19:23:39.621Z", "date_only": false, "value": "2024-08-02T19:23:39.621Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-42498", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T19:23:39.621Z", "date_only": false, "value": "2024-08-02T19:23:39.621Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-42498", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:05:31.124Z", "date_only": false, "value": "2024-08-15T18:05:31.124+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-0440", "record": "WID-SEC-W-2024-0440", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-28T03:16:40Z", "date_only": false, "value": "2025-01-28T03:16:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3206", "record": "CVE-2023-42498", "field": "creation_timestamp", "uuid": "995a1f86-9e8a-4604-b87b-2d3cdb8d94d4", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-42498\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2024-02-21T03:15:08.240\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42498\n2. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42498", "url": "https://t.me/DarkWebInformer_CVEAlerts/3206"}, {"timestamp": "2025-01-28T15:00:08Z", "date_only": false, "value": "2025-01-28T15:00:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-73X3-8MRG-5R93", "record": "GHSA-73X3-8MRG-5R93", "field": "modified"}, {"timestamp": "2025-01-28T15:09:06Z", "date_only": false, "value": "2025-01-28T15:09:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3261", "record": "CVE-2023-42498", "field": "creation_timestamp", "uuid": "c5715d29-9072-410f-bd55-4cd59d126848", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-42498\n\ud83d\udd25 CVSS Score: 10 (CVSS_V3)\n\ud83d\udd39 Description: Reflected cross-site scripting (XSS) vulnerability in the Language Override edit screen in Liferay Portal 7.4.3.8 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 4 through 92 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_portal_language_override_web_internal_portlet_PLOPortlet_key` parameter.\n\ud83d\udccf Published: 2024-02-21T03:30:37Z\n\ud83d\udccf Modified: 2025-01-28T15:00:08Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-42498\n2. https://github.com/liferay/liferay-portal\n3. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42498", "url": "https://t.me/DarkWebInformer_CVEAlerts/3261"}, {"timestamp": "2025-10-31T00:00:00Z", "date_only": true, "value": "2025-10-31", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0954", "record": "CERTFR-2025-AVI-0954", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-11-01T00:00:00Z", "date_only": true, "value": "2025-11-01", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0954", "record": "CERTFR-2025-AVI-0954", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-11-03T00:00:00Z", "date_only": false, "value": "2025-11-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0954", "record": "CERTFR-2025-AVI-0954", "field": "initial_release_date"}, {"timestamp": "2025-11-03T00:00:00Z", "date_only": false, "value": "2025-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0954", "record": "CERTFR-2025-AVI-0954", "field": "revisions.0.revision_date"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0954", "record": "CERTFR-2025-AVI-0954", "field": "last_revision_date"}, {"timestamp": "2025-11-14T00:00:00Z", "date_only": false, "value": "2025-11-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0954", "record": "CERTFR-2025-AVI-0954", "field": "revisions.1.revision_date"}, {"timestamp": "2026-06-17T06:23:57.760Z", "date_only": false, "value": "2026-06-17T06:23:57.760", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-42498", "record": "FKIE_CVE-2023-42498", "field": "lastModified"}]}
