{"metadata": {"vulnerability": "GHSA-P5GC-C584-JJ6V", "count": 11, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 7}}, "data": [{"timestamp": "2023-05-08T13:26:03.878Z", "date_only": false, "value": "2023-05-08T13:26:03.878Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-32313", "record": "CVE-2023-32313", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-15T19:45:13.963Z", "date_only": false, "value": "2023-05-15T19:45:13.963Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-32313", "record": "CVE-2023-32313", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-05-15T19:45:13.963Z", "date_only": false, "value": "2023-05-15T19:45:13.963Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-32313 / GitHub_M", "record": "CVE-2023-32313", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-15T20:15:09Z", "date_only": false, "value": "2023-05-15T20:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "GHSA-P5GC-C584-JJ6V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-05-17T03:49:37Z", "date_only": false, "value": "2023-05-17T03:49:37Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-P5GC-C584-JJ6V", "field": "published"}, {"timestamp": "2023-05-17T03:49:37Z", "date_only": false, "value": "2023-05-17T03:49:37Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-P5GC-C584-JJ6V", "field": "modified"}, {"timestamp": "2024-08-02T15:10:24.912Z", "date_only": false, "value": "2024-08-02T15:10:24.912Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-32313 / CVE", "record": "CVE-2023-32313", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-22T21:42:52.762Z", "date_only": false, "value": "2025-01-22T21:42:52.762657Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-32313 / CISA-ADP", "record": "CVE-2023-32313", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-22T21:42:56.955Z", "date_only": false, "value": "2025-01-22T21:42:56.955Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-32313", "record": "CVE-2023-32313", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-22T21:42:56.955Z", "date_only": false, "value": "2025-01-22T21:42:56.955Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-32313 / CISA-ADP", "record": "CVE-2023-32313", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-22T22:02:31Z", "date_only": false, "value": "2025-01-22T22:02:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2666", "record": "GHSA-P5GC-C584-JJ6V", "field": "creation_timestamp", "uuid": "593735e2-32ce-491a-89fe-bb5ce0d2ed3b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-32313\n\ud83d\udd39 Description: vm2 is a sandbox that can run untrusted code with Node's built-in modules. In versions 3.9.17 and lower of vm2 it was possible to get a read-write reference to the node `inspect` method and edit options for `console.log`. As a result a threat actor can edit options for the `console.log` command. This vulnerability was patched in the release of version `3.9.18` of `vm2`. Users are advised to upgrade. Users unable to upgrade may make the `inspect` method readonly with `vm.readonly(inspect)` after creating a vm.\n\ud83d\udccf Published: 2023-05-15T19:45:13.963Z\n\ud83d\udccf Modified: 2025-01-22T21:42:56.955Z\n\ud83d\udd17 References:\n1. https://github.com/patriksimek/vm2/security/advisories/GHSA-p5gc-c584-jj6v\n2. https://github.com/patriksimek/vm2/commit/5206ba25afd86ef547a2c9d48d46ca7a9e6ec238\n3. https://gist.github.com/arkark/c1c57eaf3e0a649af1a70c2b93b17550\n4. https://github.com/patriksimek/vm2/releases/tag/3.9.18", "url": "https://t.me/DarkWebInformer_CVEAlerts/2666"}]}