{"metadata": {"vulnerability": "cve-2020-13945", "count": 38, "kinds": {"milestone": 5, "sighting": 7, "kev": 6, "other": 20}}, "data": [{"timestamp": "2020-06-08T00:00:00Z", "date_only": false, "value": "2020-06-08T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-13945", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-07T00:00:00Z", "date_only": false, "value": "2020-12-07T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0118", "record": "VAR-202012-0118", "field": "sources_release_date.data.0.date"}, {"timestamp": "2020-12-07T19:04:52Z", "date_only": false, "value": "2020-12-07T19:04:52.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-13945", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-07T20:15:00Z", "date_only": false, "value": "2020-12-07T20:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C538-784J-QCXC", "record": "GHSA-C538-784J-QCXC", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-12-07T20:15:00Z", "date_only": false, "value": "2020-12-07T20:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-13945", "record": "GSD-2020-13945", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-07T20:15:12.557Z", "date_only": false, "value": "2020-12-07T20:15:12.557000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0118", "record": "VAR-202012-0118", "field": "sources_release_date.data.3.date"}, {"timestamp": "2020-12-07T20:15:12.557Z", "date_only": false, "value": "2020-12-07T20:15:12.557", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-13945", "record": "FKIE_CVE-2020-13945", "field": "published"}, {"timestamp": "2020-12-07T22:30:20Z", "date_only": false, "value": "2020-12-07T22:30:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/17209", "record": "CVE-2020-13945", "field": "creation_timestamp", "uuid": "e01731f9-a658-4da5-a177-a4fc56c4412e", "content": "\u203c CVE-2020-13945 \u203c\n\nIn Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/17209"}, {"timestamp": "2020-12-09T00:00:00Z", "date_only": true, "value": "2020-12-09", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-06957", "record": "CNVD-2021-06957", "field": "submitTime"}, {"timestamp": "2021-01-27T00:00:00Z", "date_only": true, "value": "2021-01-27", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-06957", "record": "CNVD-2021-06957", "field": "openTime"}, {"timestamp": "2021-09-01T00:00:00Z", "date_only": false, "value": "2021-09-01T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0118", "record": "VAR-202012-0118", "field": "sources_release_date.data.1.date"}, {"timestamp": "2021-09-01T04:52:00Z", "date_only": false, "value": "2021-09-01T04:52:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0118", "record": "VAR-202012-0118", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-03-07T15:23:16Z", "date_only": false, "value": "2022-03-07T15:23:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_apisix_api_default_token_rce.rb", "record": "CVE-2020-13945", "field": "creation_timestamp", "uuid": "6435b2f5-8e86-44b8-aa59-4253eee7c027", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/apache_apisix_api_default_token_rce.rb"}, {"timestamp": "2022-03-07T17:06:17Z", "date_only": false, "value": "2022-03-07T17:06:17.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2020-13945", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-08T00:00:00Z", "date_only": false, "value": "2022-03-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0118", "record": "VAR-202012-0118", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-04-19T00:00:00Z", "date_only": false, "value": "2022-04-19T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0118", "record": "VAR-202012-0118", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-04-19T15:43:00Z", "date_only": false, "value": "2022-04-19T15:43Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-13945", "record": "GSD-2020-13945", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-24T17:35:26Z", "date_only": false, "value": "2022-05-24T17:35:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C538-784J-QCXC", "record": "GHSA-C538-784J-QCXC", "field": "published"}, {"timestamp": "2022-05-24T17:35:26Z", "date_only": false, "value": "2022-05-24T17:35:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C538-784J-QCXC", "record": "GHSA-C538-784J-QCXC", "field": "modified"}, {"timestamp": "2023-12-13T01:21:46.820Z", "date_only": false, "value": "2023-12-13T01:21:46.820593Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-13945", "record": "GSD-2020-13945", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-18T01:40:59Z", "date_only": false, "value": "2023-12-18T01:40:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1883", "record": "CVE-2020-13945", "field": "creation_timestamp", "uuid": "5825c5b2-5fb9-4e80-a91d-65c36b903f0e", "content": "#ExploitObserverAlert\n\nCVE-2020-13945\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2020-13945. In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.\n\nFIRST-EPSS: 0.005580000\nNVD-IS: 3.6\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/1883"}, {"timestamp": "2024-03-06T10:51:26.305Z", "date_only": false, "value": "2024-03-06T10:51:26.305Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-APISIX-2020-13945", "record": "BIT-APISIX-2020-13945", "field": "published"}, {"timestamp": "2024-07-21T16:48:18Z", "date_only": false, "value": "2024-07-21T16:48:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/8042", "record": "CVE-2020-13945", "field": "creation_timestamp", "uuid": "9c24add4-875f-47f2-9a04-9eb315c52a77", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aA PoC exploit for CVE-2020-13945 - Apache APISIX Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/K3ysTr0K3R/CVE-2020-13945-EXPLOIT\n\n\u6807\u7b7e\uff1a#RCE", "url": "https://t.me/GithubRedTeam/8042"}, {"timestamp": "2024-08-04T12:32:14.572Z", "date_only": false, "value": "2024-08-04T12:32:14.572Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-13945", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T12:32:14.572Z", "date_only": false, "value": "2024-08-04T12:32:14.572Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-13945", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-21T05:02:12.277Z", "date_only": false, "value": "2024-11-21T05:02:12.277000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202012-0118", "record": "VAR-202012-0118", "field": "sources_update_date.data.3.date"}, {"timestamp": "2024-11-23T21:33:16.113Z", "date_only": false, "value": "2024-11-23T21:33:16.113000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202012-0118", "record": "VAR-202012-0118", "field": "last_update_date"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-13945", "field": "creation_timestamp", "uuid": "b5f3b6a0-bd5d-4ef9-8961-fd7bee73a226"}, {"timestamp": "2025-02-23T04:10:24Z", "date_only": false, "value": "2025-02-23T04:10:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-13945", "field": "creation_timestamp", "uuid": "45742141-ea66-41de-a1e6-362b76d5033e"}, {"timestamp": "2026-06-17T02:53:57.353Z", "date_only": false, "value": "2026-06-17T02:53:57.353", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-13945", "record": "FKIE_CVE-2020-13945", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-APISIX-2020-13945", "record": "BIT-APISIX-2020-13945", "field": "modified"}, {"timestamp": "2026-10-27T11:23:40Z", "date_only": false, "value": "2026-10-27T11:23:40+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2020-13945", "field": "timestamps.asserted_at", "uuid": "1202f720-40f1-45f5-a1ac-4c197ca9080d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-27T11:23:40Z", "date_only": false, "value": "2026-10-27T11:23:40+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2020-13945", "field": "timestamps.first_seen_at", "uuid": "1202f720-40f1-45f5-a1ac-4c197ca9080d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-29T01:01:15.599Z", "date_only": false, "value": "2026-10-29T01:01:15.599256Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1202f720-40f1-45f5-a1ac-4c197ca9080d", "record": "CVE-2020-13945", "field": "creation_timestamp", "uuid": "584c3e59-3040-488d-9fbe-b62ccb009094", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1202f720-40f1-45f5-a1ac-4c197ca9080d"}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": false, "value": "2026-11-02T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2020-13945", "field": "timestamps.last_seen_at", "uuid": "1202f720-40f1-45f5-a1ac-4c197ca9080d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": true, "value": "2026-11-02", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2020-13945", "field": "evidence.0.details.observation_date", "uuid": "1202f720-40f1-45f5-a1ac-4c197ca9080d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-02T00:00:00Z", "date_only": false, "value": "2026-11-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2020-13945", "field": "status.status_updated_at", "uuid": "1202f720-40f1-45f5-a1ac-4c197ca9080d", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T01:00:02Z", "date_only": false, "value": "2026-11-04T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2020-13945", "field": "timestamps.recorded_at", "uuid": "1202f720-40f1-45f5-a1ac-4c197ca9080d", "status": {"status_reason": "confirmed", "exploited": true}}]}