{"metadata": {"vulnerability": "CVE-2023-6909", "count": 44, "kinds": {"milestone": 7, "sighting": 16, "kev": 11, "other": 10}}, "data": [{"timestamp": "2023-12-18T00:00:12.436Z", "date_only": false, "value": "2023-12-18T00:00:12.436Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-6909", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-18T00:00:31.984Z", "date_only": false, "value": "2023-12-18T00:00:31.984Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-6909", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-12-18T04:15:00Z", "date_only": false, "value": "2023-12-18T04:15:00+00:00", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2023-252", "record": "PYSEC-2023-252", "field": "published"}, {"timestamp": "2023-12-18T04:15:52Z", "date_only": false, "value": "2023-12-18T04:15:52Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5R3Q-93Q3-F978", "record": "GHSA-5R3Q-93Q3-F978", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-12-18T04:15:52.367Z", "date_only": false, "value": "2023-12-18T04:15:52.367", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-6909", "record": "FKIE_CVE-2023-6909", "field": "published"}, {"timestamp": "2023-12-18T04:15:52.367Z", "date_only": false, "value": "2023-12-18T04:15:52.367", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-6909", "record": "GSD-2023-6909", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-12-18T06:01:19.346Z", "date_only": false, "value": "2023-12-18T06:01:19.346834Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-6909", "record": "GSD-2023-6909", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-20T06:30:25Z", "date_only": false, "value": "2023-12-20T06:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5R3Q-93Q3-F978", "record": "GHSA-5R3Q-93Q3-F978", "field": "published"}, {"timestamp": "2023-12-20T11:17:57Z", "date_only": false, "value": "2023-12-20T11:17:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/156875", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "204b9d34-4ed3-488a-acff-421cd5146894", "content": "https://ift.tt/OFrMReH\nCVE-2023-6909 Exploit", "url": "https://t.me/ctinow/156875"}, {"timestamp": "2024-01-12T09:11:38Z", "date_only": false, "value": "2024-01-12T09:11:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/167138", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "3087529a-9cb2-46eb-a50e-0e4e1b57b417", "content": "https://ift.tt/wTlG48E\nCVE-2023-6909 | mlflow up to 2.9.1 path traversal", "url": "https://t.me/ctinow/167138"}, {"timestamp": "2024-02-06T19:33:17.981Z", "date_only": false, "value": "2024-02-06T19:33:17.981Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / @huntr_ai", "record": "CVE-2023-6909", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-02-06T20:16:01.753Z", "date_only": false, "value": "2024-02-06T20:16:01.753", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-6909", "record": "GSD-2023-6909", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-06T22:20:23.832Z", "date_only": false, "value": "2024-02-06T22:20:23.832000+00:00", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2023-252", "record": "PYSEC-2023-252", "field": "modified"}, {"timestamp": "2024-03-06T10:56:59.590Z", "date_only": false, "value": "2024-03-06T10:56:59.590Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2023-6909", "record": "BIT-MLFLOW-2023-6909", "field": "published"}, {"timestamp": "2024-04-18T06:48:53Z", "date_only": false, "value": "2024-04-18T06:48:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/4711", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "74894495-1f44-421c-8a4c-845c17df4de2", "content": "#ExploitObserverAlert\n\nCVE-2024-1594\n\nDESCRIPTION: Exploit Observer has 3 entries in 1 file formats related to CVE-2024-1594. A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect.\n\nFIRST-EPSS: 0.000430000\nARPS-EXPLOITABILITY: 0.9019774", "url": "https://t.me/arpsyndicate/4711"}, {"timestamp": "2024-08-02T08:42:08.521Z", "date_only": false, "value": "2024-08-02T08:42:08.521Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-6909", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T08:42:08.521Z", "date_only": false, "value": "2024-08-02T08:42:08.521Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-6909", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-24T21:25:26Z", "date_only": false, "value": "2024-09-24T21:25:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5R3Q-93Q3-F978", "record": "GHSA-5R3Q-93Q3-F978", "field": "modified"}, {"timestamp": "2025-02-06T02:39:18Z", "date_only": false, "value": "2025-02-06T02:39:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/r1wKJXjH2pTO0xeaSE1QheSc4QAYiX6QzNohFiLFxNX558lD", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "1d085e9a-1166-4aa4-a65b-f15c180f90a6"}, {"timestamp": "2026-04-30T18:23:58Z", "date_only": false, "value": "2026-04-30T18:23:58+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-6909", "field": "timestamps.asserted_at", "uuid": "8d22024b-e155-4586-8605-f179ef65516d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-30T18:23:58Z", "date_only": false, "value": "2026-04-30T18:23:58+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-6909", "field": "timestamps.first_seen_at", "uuid": "8d22024b-e155-4586-8605-f179ef65516d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-6909", "field": "timestamps.asserted_at", "uuid": "14b605c4-9d49-490a-8762-9bd407e96f72", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-6909", "field": "evidence.0.details.added_date", "uuid": "14b605c4-9d49-490a-8762-9bd407e96f72", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "44f5679f-87ab-4d4c-8164-cd566210a9ec"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-6909", "field": "timestamps.first_seen_at", "uuid": "14b605c4-9d49-490a-8762-9bd407e96f72", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-6909", "field": "status.status_updated_at", "uuid": "14b605c4-9d49-490a-8762-9bd407e96f72", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-04T00:00:00Z", "date_only": false, "value": "2026-06-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-04)", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "0c39bc73-4599-4aa5-bbd2-e8fbe4870edf"}, {"timestamp": "2026-06-17T06:51:39.923Z", "date_only": false, "value": "2026-06-17T06:51:39.923", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-6909", "record": "FKIE_CVE-2023-6909", "field": "lastModified"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-6909", "field": "timestamps.recorded_at", "uuid": "14b605c4-9d49-490a-8762-9bd407e96f72", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:04.418Z", "date_only": false, "value": "2026-06-19T12:42:04.418135Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/14b605c4-9d49-490a-8762-9bd407e96f72", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "14e921ec-0935-4201-9e80-a2577d267d6c", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/14b605c4-9d49-490a-8762-9bd407e96f72"}, {"timestamp": "2026-06-19T12:45:11.090Z", "date_only": false, "value": "2026-06-19T12:45:11.090162Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f3b56936-7185-46ca-9a38-3a8ee933beae", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "1e79c525-b5c5-4860-8cfc-db78b85ca142", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f3b56936-7185-46ca-9a38-3a8ee933beae"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "0b2a3f3f-f01e-418d-a391-62496a02c9e9"}, {"timestamp": "2026-06-23T14:03:02.055Z", "date_only": false, "value": "2026-06-23T14:03:02.055708Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/33f6d8bc-0ff6-4c3e-becd-b8b12b8eb6b5", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "3cd30c4f-42e9-4860-9eb4-17e74c9d88ef", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/33f6d8bc-0ff6-4c3e-becd-b8b12b8eb6b5"}, {"timestamp": "2026-06-27T10:15:09.156Z", "date_only": false, "value": "2026-06-27T10:15:09.156250Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-26)", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "e1c85aca-6c35-48ce-a064-d2e1df6fdb43"}, {"timestamp": "2026-06-30T09:22:56.782Z", "date_only": false, "value": "2026-06-30T09:22:56.782370Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1962e632-5979-4757-ba05-01545a9aee7b", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "01aac1a2-c3cc-4091-bfdc-f561884310aa", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/1962e632-5979-4757-ba05-01545a9aee7b"}, {"timestamp": "2026-07-01T05:54:15.345Z", "date_only": false, "value": "2026-07-01T05:54:15.345078Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8d22024b-e155-4586-8605-f179ef65516d", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "4bce290d-34ca-4082-addb-2e44a4378e55", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/8d22024b-e155-4586-8605-f179ef65516d"}, {"timestamp": "2026-07-13T10:15:31.028Z", "date_only": false, "value": "2026-07-13T10:15:31.028902Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "96738dab-a563-4a4c-8b97-5fab7b628131"}, {"timestamp": "2026-08-07T11:00:22.542Z", "date_only": false, "value": "2026-08-07T11:00:22.542500Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-06)", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "211a0289-e45f-4637-be17-a0224c2ab388"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-MLFLOW-2023-6909", "record": "BIT-MLFLOW-2023-6909", "field": "modified"}, {"timestamp": "2026-10-26T00:31:19Z", "date_only": false, "value": "2026-10-26T00:31:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/skilfoy/dae3706a5b5da2e8b38f57b211c2d4a0", "record": "CVE-2023-6909", "field": "creation_timestamp", "uuid": "410b7ba3-ae4f-4119-bd0b-6c40b19a6819", "url": "https://gist.github.com/skilfoy/dae3706a5b5da2e8b38f57b211c2d4a0"}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-6909", "field": "timestamps.last_seen_at", "uuid": "8d22024b-e155-4586-8605-f179ef65516d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": true, "value": "2026-10-27", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-6909", "field": "evidence.0.details.observation_date", "uuid": "8d22024b-e155-4586-8605-f179ef65516d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T00:00:00Z", "date_only": false, "value": "2026-10-27T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-6909", "field": "status.status_updated_at", "uuid": "8d22024b-e155-4586-8605-f179ef65516d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T01:00:01Z", "date_only": false, "value": "2026-10-29T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-6909", "field": "timestamps.recorded_at", "uuid": "8d22024b-e155-4586-8605-f179ef65516d", "status": {"status_reason": "confirmed", "exploited": true}}]}