{"metadata": {"vulnerability": "CVE-2023-5009", "count": 31, "kinds": {"milestone": 6, "sighting": 8, "kev": 0, "other": 17}}, "data": [{"timestamp": "2023-09-15T22:30:36.931Z", "date_only": false, "value": "2023-09-15T22:30:36.931Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-5009", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-19T07:01:14.930Z", "date_only": false, "value": "2023-09-19T07:01:14.930Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-5009", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-19T08:16:00Z", "date_only": false, "value": "2023-09-19T08:16Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-5009", "record": "GSD-2023-5009", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-19T08:16:07Z", "date_only": false, "value": "2023-09-19T08:16:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-G4C2-HHJC-4HGG", "record": "GHSA-G4C2-HHJC-4HGG", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-19T08:16:07.203Z", "date_only": false, "value": "2023-09-19T08:16:07.203", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5009", "record": "FKIE_CVE-2023-5009", "field": "published"}, {"timestamp": "2023-09-19T09:30:15Z", "date_only": false, "value": "2023-09-19T09:30:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-G4C2-HHJC-4HGG", "record": "GHSA-G4C2-HHJC-4HGG", "field": "published"}, {"timestamp": "2023-09-19T22:00:00Z", "date_only": false, "value": "2023-09-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2397", "record": "WID-SEC-W-2023-2397", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-19T22:00:00Z", "date_only": false, "value": "2023-09-19T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2397", "record": "WID-SEC-W-2023-2397", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-19T22:00:00Z", "date_only": false, "value": "2023-09-19T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2397", "record": "WID-SEC-W-2023-2397", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-19T22:00:00Z", "date_only": false, "value": "2023-09-19T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2397", "record": "WID-SEC-W-2023-2397", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-09-20T09:19:47Z", "date_only": false, "value": "2023-09-20T09:19:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3896", "record": "CVE-2023-5009", "field": "creation_timestamp", "uuid": "dae38bff-ee69-41ff-bebd-f3180e21c1e5", "content": "\ud83d\udea8 Critical Security Alert! GitLab issues patches for CVE-2023-5009, a flaw allowing attackers to run pipelines as other users. \n \nProtect your code\u2014update now: https://thehackernews.com/2023/09/gitlab-releases-urgent-security-patches.html", "url": "https://t.me/thehackernews/3896"}, {"timestamp": "2023-09-20T10:49:32Z", "date_only": false, "value": "2023-09-20T10:49:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/816", "record": "CVE-2023-5009", "field": "creation_timestamp", "uuid": "dfaedbf5-ed5f-47ac-a460-1a1c91a5aaa9", "content": "GitLab Releases Urgent Security Patches for Critical Vulnerability\nhttps://thehackernews.com/2023/09/gitlab-releases-urgent-security-patches.html\n\nGitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another user.\nThe issue, tracked as\u00a0CVE-2023-5009\u00a0(CVSS score: 9.6), impacts all versions of GitLab Enterprise Edition (EE) starting from 13.12 and prior to 16.2.7 as well as from 16.3 and before 16.3.4.\n\"It was possible for an attacker to\u00a0run pipelines\u00a0as an arbitrary user via scheduled", "url": "https://t.me/KomunitiSiber/816"}, {"timestamp": "2023-09-20T11:28:44Z", "date_only": false, "value": "2023-09-20T11:28:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/138119", "record": "CVE-2023-5009", "field": "creation_timestamp", "uuid": "4feea2ff-7838-4514-8eba-210123244b31", "content": "https://ift.tt/nCIgQho\nGitLab addressed critical vulnerability CVE-2023-5009", "url": "https://t.me/ctinow/138119"}, {"timestamp": "2023-09-20T12:57:35Z", "date_only": false, "value": "2023-09-20T12:57:35.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/8fzC70k0AqPANaoMqyiurnud2UPl_BqAdrIlayNGsF1OKw", "record": "CVE-2023-5009", "field": "creation_timestamp", "uuid": "6cc42189-7b0a-4e62-8596-ccebae8816d7"}, {"timestamp": "2023-09-21T14:18:21Z", "date_only": false, "value": "2023-09-21T14:18:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/secmedia/1390", "record": "CVE-2023-5009", "field": "creation_timestamp", "uuid": "672a6ce9-5dda-4d8b-8793-7371f58897f8", "content": "\u0412 GitLab Community Edition \u0438 Enterprise Edition \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 13.12 \u043f\u043e 16.2.7 \u0438 \u0441 16.3 \u043f\u043e 16.3.4 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-5009 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 9.6 \u043f\u043e CVSS.", "url": "https://t.me/secmedia/1390"}, {"timestamp": "2023-09-22T12:37:13Z", "date_only": false, "value": "2023-09-22T12:37:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/138702", "record": "CVE-2023-5009", "field": "creation_timestamp", "uuid": "b6a01617-0c42-4bf4-939c-936fcb9a6a0c", "content": "https://ift.tt/mB3Cjlk\nGitLab fixes critical vulnerability, patch now! (CVE-2023-5009)", "url": "https://t.me/ctinow/138702"}, {"timestamp": "2023-10-09T01:25:24Z", "date_only": false, "value": "2023-10-09T01:25:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/UwishMNZTytGOcUkcztejvttJn150wusv9THLvRt7_lz1Co", "record": "CVE-2023-5009", "field": "creation_timestamp", "uuid": "797955fc-c667-491b-9e94-14c8be97285e"}, {"timestamp": "2023-10-20T20:21:00Z", "date_only": false, "value": "2023-10-20T20:21Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-5009", "record": "GSD-2023-5009", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:50.618Z", "date_only": false, "value": "2023-12-13T01:20:50.618718Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-5009", "record": "GSD-2023-5009", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:57:56.479Z", "date_only": false, "value": "2024-03-06T10:57:56.479Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2023-5009", "record": "BIT-GITLAB-2023-5009", "field": "published"}, {"timestamp": "2024-04-04T07:43:39Z", "date_only": false, "value": "2024-04-04T07:43:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-G4C2-HHJC-4HGG", "record": "GHSA-G4C2-HHJC-4HGG", "field": "modified"}, {"timestamp": "2024-08-02T07:44:53.779Z", "date_only": false, "value": "2024-08-02T07:44:53.779Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-5009", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:58:38.347Z", "date_only": false, "value": "2024-08-15T17:58:38.347+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2397", "record": "WID-SEC-W-2023-2397", "field": "document.tracking.generator.date"}, {"timestamp": "2025-02-26T21:51:08.131Z", "date_only": false, "value": "2025-02-26T21:51:08.131679Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-5009", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-26T21:51:08.131Z", "date_only": false, "value": "2025-02-26T21:51:08.131679Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5009", "record": "FKIE_CVE-2023-5009", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-27T20:49:57.223Z", "date_only": false, "value": "2025-02-27T20:49:57.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-5009", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-20T10:02:07.006Z", "date_only": false, "value": "2025-05-20T10:02:07.006Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2023-5009", "record": "BIT-GITLAB-2023-5009", "field": "modified"}, {"timestamp": "2025-05-22T04:44:33Z", "date_only": false, "value": "2025-05-22T04:44:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17255", "record": "CVE-2023-5009", "field": "creation_timestamp", "uuid": "69ad0f82-0d25-4bef-9888-a6499ee5f901", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-5009\n\ud83d\udd25 CVSS Score: 9.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab EE affecting all versions starting from 13.12 before 16.2.7, all versions starting from 16.3 before 16.3.4. It was possible for an attacker to run pipeline jobs as an arbitrary user via scheduled security scan policies. This was a bypass of [CVE-2023-3932](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3932) showing additional impact.\n\ud83d\udccf Published: 2023-09-19T07:01:14.930Z\n\ud83d\udccf Modified: 2025-05-22T04:09:01.346Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/425304\n2. https://hackerone.com/reports/2147126", "url": "https://t.me/DarkWebInformer_CVEAlerts/17255"}, {"timestamp": "2026-06-17T06:47:20.077Z", "date_only": false, "value": "2026-06-17T06:47:20.077", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5009", "record": "FKIE_CVE-2023-5009", "field": "lastModified"}, {"timestamp": "2026-10-28T11:39:50.305Z", "date_only": false, "value": "2026-10-28T11:39:50.305Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-5009", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-28T11:39:50.305Z", "date_only": false, "value": "2026-10-28T11:39:50.305Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2023-5009", "field": "containers.cna.providerMetadata.dateUpdated"}]}