{"metadata": {"vulnerability": "CVE-2023-49087", "count": 15, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 9}}, "data": [{"timestamp": "2023-11-21T18:57:30.429Z", "date_only": false, "value": "2023-11-21T18:57:30.429Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-49087", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-11-28T18:52:19Z", "date_only": false, "value": "2023-11-28T18:52:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WW7X-3GXH-QM6R", "record": "GHSA-WW7X-3GXH-QM6R", "field": "published"}, {"timestamp": "2023-11-30T05:20:28.298Z", "date_only": false, "value": "2023-11-30T05:20:28.298Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-49087", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-30T05:20:28.298Z", "date_only": false, "value": "2023-11-30T05:20:28.298Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-49087", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-30T06:15:00Z", "date_only": false, "value": "2023-11-30T06:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-49087", "record": "GSD-2023-49087", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-11-30T06:15:47Z", "date_only": false, "value": "2023-11-30T06:15:47Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WW7X-3GXH-QM6R", "record": "GHSA-WW7X-3GXH-QM6R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-30T06:15:47.173Z", "date_only": false, "value": "2023-11-30T06:15:47.173", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49087", "record": "FKIE_CVE-2023-49087", "field": "published"}, {"timestamp": "2023-12-06T17:49:00Z", "date_only": false, "value": "2023-12-06T17:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-49087", "record": "GSD-2023-49087", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-06T21:08:04Z", "date_only": false, "value": "2023-12-06T21:08:04Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WW7X-3GXH-QM6R", "record": "GHSA-WW7X-3GXH-QM6R", "field": "modified"}, {"timestamp": "2023-12-13T01:20:35.058Z", "date_only": false, "value": "2023-12-13T01:20:35.058016Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-49087", "record": "GSD-2023-49087", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-20T08:02:00Z", "date_only": false, "value": "2023-12-20T08:02:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/156793", "record": "CVE-2023-49087", "field": "creation_timestamp", "uuid": "835378fc-68fb-4bbe-9b44-e87a13856355", "content": "https://ift.tt/5xOJHhy\nCVE-2023-49087 | SimpleSAMLphp saml2/xml-security XML Signature data authenticity", "url": "https://t.me/ctinow/156793"}, {"timestamp": "2024-04-09T19:27:30Z", "date_only": false, "value": "2024-04-09T19:27:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4403", "record": "CVE-2023-49087", "field": "creation_timestamp", "uuid": "28be15e6-442d-497d-9a93-1f1b7421df21", "content": "#ExploitObserverAlert\n\nCVE-2023-49087\n\nDESCRIPTION: Exploit Observer has 7 entries in 2 file formats related to CVE-2023-49087. xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree (the one that contains the DigestValue) verifies and matches a trusted public key. If an attacker somehow (i.e. by exploiting a bug in PHP's canonicalization function) manages to manipulate the canonicalized version's DigestValue, it would be possible to forge the signature. This issue has been patched in version 1.6.12 and 5.0.0-alpha.13.\n\nFIRST-EPSS: 0.000480000\nNVD-IS: 3.6\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/4403"}, {"timestamp": "2024-08-02T21:46:29.195Z", "date_only": false, "value": "2024-08-02T21:46:29.195Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-49087", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T21:46:29.195Z", "date_only": false, "value": "2024-08-02T21:46:29.195Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-49087", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:35:20.330Z", "date_only": false, "value": "2026-06-17T06:35:20.330", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49087", "record": "FKIE_CVE-2023-49087", "field": "lastModified"}]}