{"metadata": {"vulnerability": "CVE-2023-51784", "count": 23, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 13}}, "data": [{"timestamp": "2023-12-26T01:58:34.359Z", "date_only": false, "value": "2023-12-26T01:58:34.359Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-51784", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-26T06:01:24.984Z", "date_only": false, "value": "2023-12-26T06:01:24.984552Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-51784", "record": "GSD-2023-51784", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-01-03T09:39:23.382Z", "date_only": false, "value": "2024-01-03T09:39:23.382Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-51784", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-03T09:40:05.178Z", "date_only": false, "value": "2024-01-03T09:40:05.178Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2023-51784", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-03T10:15:09Z", "date_only": false, "value": "2024-01-03T10:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9XG9-HH45-XCM6", "record": "GHSA-9XG9-HH45-XCM6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-01-03T10:15:09.027Z", "date_only": false, "value": "2024-01-03T10:15:09.027", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-51784", "record": "FKIE_CVE-2023-51784", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-03T10:15:09.027Z", "date_only": false, "value": "2024-01-03T10:15:09.027", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-51784", "record": "GSD-2023-51784", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2024-01-03T11:26:10Z", "date_only": false, "value": "2024-01-03T11:26:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/162312", "record": "CVE-2023-51784", "field": "creation_timestamp", "uuid": "84a830e7-0005-4fdc-8d17-106da1217da8", "content": "https://ift.tt/Kk4Hlmz\nCVE-2023-51784", "url": "https://t.me/ctinow/162312"}, {"timestamp": "2024-01-03T12:30:21Z", "date_only": false, "value": "2024-01-03T12:30:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9XG9-HH45-XCM6", "record": "GHSA-9XG9-HH45-XCM6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-04T01:35:19Z", "date_only": false, "value": "2024-01-04T01:35:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cibsecurity/74313", "record": "CVE-2023-51784", "field": "creation_timestamp", "uuid": "d50d886b-3c1b-41e1-a289-85a355091edd", "content": "\u203c\ufe0fCVE-2023-51784\u203c\ufe0f\n\nImproper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong from 1.5.0 through 1.9.0, which could lead to Remote Code Execution.\u00a0Users are advised to upgrade to Apache InLong's 1.10.0 or cherrypick 1 to solve it.  1  httpsgithub.comapacheinlongpull9329   \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74313", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-05T13:14:09Z", "date_only": false, "value": "2024-01-05T13:14:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arpsyndicate/2474", "record": "CVE-2023-51784", "field": "creation_timestamp", "uuid": "8c0aa691-32ed-4ac1-a207-dac681bc08d7", "content": "#ExploitObserverAlert\n\nCVE-2023-51784\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-51784. Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution.\u00a0Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it.  [1]  https://github.com/apache/inlong/pull/9329", "url": "https://t.me/arpsyndicate/2474", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-09T00:00:00Z", "date_only": true, "value": "2024-01-09", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-06239", "record": "CNVD-2024-06239", "field": "submitTime", "linked_record": true}, {"timestamp": "2024-01-09T19:19:59.413Z", "date_only": false, "value": "2024-01-09T19:19:59.413", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-51784", "record": "GSD-2023-51784", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-01-23T16:26:55Z", "date_only": false, "value": "2024-01-23T16:26:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/172098", "record": "CVE-2023-51784", "field": "creation_timestamp", "uuid": "686b90af-6478-4e8b-902b-bb131a75cadb", "content": "https://ift.tt/BekfhzM\nCVE-2023-51784 | Apache InLong up to 1.9.0 code injection", "url": "https://t.me/ctinow/172098"}, {"timestamp": "2024-01-31T00:00:00Z", "date_only": true, "value": "2024-01-31", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-06239", "record": "CNVD-2024-06239", "field": "openTime", "linked_record": true}, {"timestamp": "2024-08-02T22:48:11.250Z", "date_only": false, "value": "2024-08-02T22:48:11.250Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-51784", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T19:30:07Z", "date_only": false, "value": "2025-02-13T19:30:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9XG9-HH45-XCM6", "record": "GHSA-9XG9-HH45-XCM6", "field": "modified", "linked_record": true}, {"timestamp": "2025-02-13T20:15:50Z", "date_only": false, "value": "2025-02-13T20:15:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4346", "record": "CVE-2023-51784", "field": "creation_timestamp", "uuid": "35813f34-2489-491d-bf88-c9530bbf7d4d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-51784\n\ud83d\udd25 CVSS Score: 9.8 (CVSS_V3)\n\ud83d\udd39 Description: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.9.0, which could lead to Remote Code Execution.\u00a0Users are advised to upgrade to Apache InLong's 1.10.0 or cherry-pick [1] to solve it.\n\n[1]  https://github.com/apache/inlong/pull/9329\n\ud83d\udccf Published: 2024-01-03T12:30:21Z\n\ud83d\udccf Modified: 2025-02-13T19:30:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-51784\n2. https://github.com/apache/inlong/pull/9329\n3. https://github.com/apache/inlong/commit/1607837be28438c0ccae8da15afb653f2afed090\n4. https://github.com/apache/inlong\n5. https://lists.apache.org/thread/4nxbyl6mh5jgh0plk0qposbxwn6w9h8j\n6. http://www.openwall.com/lists/oss-security/2024/01/03/1", "url": "https://t.me/DarkWebInformer_CVEAlerts/4346", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-16T15:51:40.924Z", "date_only": false, "value": "2025-05-16T15:51:40.924987Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-51784", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-16T15:51:40.924Z", "date_only": false, "value": "2025-05-16T15:51:40.924987Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-51784", "record": "FKIE_CVE-2023-51784", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-16T15:53:16.443Z", "date_only": false, "value": "2025-05-16T15:53:16.443Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-51784", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-16T15:53:16.443Z", "date_only": false, "value": "2025-05-16T15:53:16.443Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-51784", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:41:39.780Z", "date_only": false, "value": "2026-06-17T06:41:39.780", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-51784", "record": "FKIE_CVE-2023-51784", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T20:32:20.730Z", "anchors": {"origin": {"timestamp": "2024-01-03T09:39:23.382Z", "date_only": false, "value": "2024-01-03T09:39:23.382Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-51784", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-01-03T09:39:23.382Z", "date_only": false, "value": "2024-01-03T09:39:23.382Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-51784", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-01-04T01:35:19Z", "date_only": false, "value": "2024-01-04T01:35:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cibsecurity/74313", "record": "CVE-2023-51784", "field": "creation_timestamp", "uuid": "d50d886b-3c1b-41e1-a289-85a355091edd", "content": "\u203c\ufe0fCVE-2023-51784\u203c\ufe0f\n\nImproper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong from 1.5.0 through 1.9.0, which could lead to Remote Code Execution.\u00a0Users are advised to upgrade to Apache InLong's 1.10.0 or cherrypick 1 to solve it.  1  httpsgithub.comapacheinlongpull9329   \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74313", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 57355.618, "hours": 15.932116111111112, "days": 0.6638381712962963, "min_seconds": 57355.618, "max_seconds": 57355.618, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-03T09:39:23.382Z", "date_only": false, "value": "2024-01-03T09:39:23.382Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-51784", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-01-04T01:35:19Z", "date_only": false, "value": "2024-01-04T01:35:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cibsecurity/74313", "record": "CVE-2023-51784", "field": "creation_timestamp", "uuid": "d50d886b-3c1b-41e1-a289-85a355091edd", "content": "\u203c\ufe0fCVE-2023-51784\u203c\ufe0f\n\nImproper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong from 1.5.0 through 1.9.0, which could lead to Remote Code Execution.\u00a0Users are advised to upgrade to Apache InLong's 1.10.0 or cherrypick 1 to solve it.  1  httpsgithub.comapacheinlongpull9329   \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74313", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 89895177.348619, "hours": 24970.88259683861, "days": 1040.4534415349422, "min_seconds": 89895177.348619, "max_seconds": 89895177.348619, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-03T09:39:23.382Z", "date_only": false, "value": "2024-01-03T09:39:23.382Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-51784", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T20:32:20.730Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 89837821.730619, "hours": 24954.9504807275, "days": 1039.7896033636457, "min_seconds": 89837821.730619, "max_seconds": 89837821.730619, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-04T01:35:19Z", "date_only": false, "value": "2024-01-04T01:35:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cibsecurity/74313", "record": "CVE-2023-51784", "field": "creation_timestamp", "uuid": "d50d886b-3c1b-41e1-a289-85a355091edd", "content": "\u203c\ufe0fCVE-2023-51784\u203c\ufe0f\n\nImproper Control of Generation of Code 'Code Injection' vulnerability in Apache InLong.This issue affects Apache InLong from 1.5.0 through 1.9.0, which could lead to Remote Code Execution.\u00a0Users are advised to upgrade to Apache InLong's 1.10.0 or cherrypick 1 to solve it.  1  httpsgithub.comapacheinlongpull9329   \n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74313", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T20:32:20.730Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}