{"metadata": {"vulnerability": "cve-2015-9284", "count": 23, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 13}}, "data": [{"timestamp": "2015-05-25T00:00:00Z", "date_only": true, "value": "2015-05-25", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2015-9284", "record": "GSD-2015-9284", "field": "namespaces.github.com/rubysec/ruby-advisory-db.date"}, {"timestamp": "2015-05-25T00:00:00Z", "date_only": false, "value": "2015-05-25T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / hackerone", "record": "cve-2015-9284", "field": "containers.cna.datePublic"}, {"timestamp": "2015-05-25T00:00:00Z", "date_only": false, "value": "2015-05-25T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2015-9284", "record": "GSD-2015-9284", "field": "gsd.osvSchema.published"}, {"timestamp": "2015-05-25T00:00:00Z", "date_only": false, "value": "2015-05-25T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2015-9284", "record": "GSD-2015-9284", "field": "gsd.osvSchema.modified"}, {"timestamp": "2019-04-09T00:00:00Z", "date_only": false, "value": "2019-04-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2015-9284", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-04-26T00:00:00Z", "date_only": true, "value": "2019-04-26", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2015-9284", "record": "GSD-2015-9284", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2019-04-26T14:03:53Z", "date_only": false, "value": "2019-04-26T14:03:53.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2015-9284", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-04-26T15:29:00Z", "date_only": false, "value": "2019-04-26T15:29:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WW4X-RWQ6-QPGF", "record": "GHSA-WW4X-RWQ6-QPGF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-04-26T15:29:00Z", "date_only": false, "value": "2019-04-26T15:29:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2015-9284", "record": "UBUNTU-CVE-2015-9284", "field": "published"}, {"timestamp": "2019-04-26T15:29:00.267Z", "date_only": false, "value": "2019-04-26T15:29:00.267", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2015-9284", "record": "FKIE_CVE-2015-9284", "field": "published"}, {"timestamp": "2019-04-26T15:29:00.267Z", "date_only": false, "value": "2019-04-26T15:29:00.267", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2015-9284", "record": "GSD-2015-9284", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2019-04-26T18:32:45Z", "date_only": false, "value": "2019-04-26T18:32:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/3963", "record": "CVE-2015-9284", "field": "creation_timestamp", "uuid": "2f3e527a-91d9-45c8-a59f-ebfda1bba56c", "content": "ATENTION\u203c New - CVE-2015-9284\n\nThe request phase of the OmniAuth Ruby gem is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/3963"}, {"timestamp": "2019-05-29T19:11:31Z", "date_only": false, "value": "2019-05-29T19:11:31Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WW4X-RWQ6-QPGF", "record": "GHSA-WW4X-RWQ6-QPGF", "field": "published"}, {"timestamp": "2020-03-04T14:41:58Z", "date_only": false, "value": "2020-03-04T14:41:58.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "cve-2015-9284", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": true, "value": "2020-11-13", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2015-9284", "record": "GSD-2015-9284", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-12-08T13:31:16Z", "date_only": false, "value": "2023-12-08T13:31:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1567", "record": "CVE-2015-9284", "field": "creation_timestamp", "uuid": "9c4aebd6-3bf5-4db4-97f4-93f68e0609a2", "content": "#ExploitObserverAlert\n\nCVE-2015-9284\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2015-9284. The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.\n\nFIRST-EPSS: 0.001380000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/1567"}, {"timestamp": "2023-12-11T15:38:56Z", "date_only": false, "value": "2023-12-11T15:38:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1769", "record": "CVE-2015-9284", "field": "creation_timestamp", "uuid": "2a5b43a7-84b9-47df-a8fd-8fb9438b4e0a", "content": "#ExploitObserverAlert\n\nCVE-2015-9284\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2015-9284. The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able to sign into the web application as the primary account.\n\nFIRST-EPSS: 0.001380000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/1769"}, {"timestamp": "2024-02-14T16:29:38.470Z", "date_only": false, "value": "2024-02-14T16:29:38.470", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2015-9284", "record": "GSD-2015-9284", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-15T15:03:15Z", "date_only": false, "value": "2024-02-15T15:03:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WW4X-RWQ6-QPGF", "record": "GHSA-WW4X-RWQ6-QPGF", "field": "modified"}, {"timestamp": "2024-08-06T08:43:42.338Z", "date_only": false, "value": "2024-08-06T08:43:42.338Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2015-9284", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-06T08:43:42.338Z", "date_only": false, "value": "2024-08-06T08:43:42.338Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2015-9284", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T00:36:12.680Z", "date_only": false, "value": "2026-06-17T00:36:12.680", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2015-9284", "record": "FKIE_CVE-2015-9284", "field": "lastModified"}, {"timestamp": "2026-10-17T09:04:33Z", "date_only": false, "value": "2026-10-17T09:04:33Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2015-9284", "record": "UBUNTU-CVE-2015-9284", "field": "modified"}]}