{"metadata": {"vulnerability": "cve-2020-16952", "count": 32, "kinds": {"milestone": 6, "sighting": 13, "kev": 0, "other": 13}}, "data": [{"timestamp": "2020-08-04T00:00:00Z", "date_only": false, "value": "2020-08-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-16952", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-10-13T07:00:00Z", "date_only": false, "value": "2020-10-13T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2020-16952", "field": "containers.cna.datePublic"}, {"timestamp": "2020-10-14T00:00:00Z", "date_only": false, "value": "2020-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-633", "record": "CERTFR-2020-AVI-633", "field": "last_revision_date"}, {"timestamp": "2020-10-14T00:00:00Z", "date_only": false, "value": "2020-10-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-633", "record": "CERTFR-2020-AVI-633", "field": "initial_release_date"}, {"timestamp": "2020-10-14T00:00:00Z", "date_only": false, "value": "2020-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-633", "record": "CERTFR-2020-AVI-633", "field": "revisions.0.revision_date"}, {"timestamp": "2020-10-16T19:37:24Z", "date_only": false, "value": "2020-10-16T19:37:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/8342", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "0e9a556b-f113-4546-99fa-4cf2ceb0fc7a", "content": "UK urges orgs to patch severe CVE-2020-16952 SharePoint RCE bug\n\nThe U.K. National Cyber Security Centre (NCSC) today issued an alert highlighting the risks behind the recently addressed CVE2020-16952 remote code execution (RCE) vulnerability in\u00a0Microsoft SharePoint Server. [...]\n\nhttps://www.bleepingcomputer.com/news/security/uk-urges-orgs-to-patch-severe-cve-2020-16952-sharepoint-rce-bug/", "url": "https://t.me/BleepingComputer/8342"}, {"timestamp": "2020-10-16T22:18:03Z", "date_only": false, "value": "2020-10-16T22:18:03.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-16952", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-10-16T23:15:00Z", "date_only": false, "value": "2020-10-16T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4XG2-WCMM-2J45", "record": "GHSA-4XG2-WCMM-2J45", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-10-16T23:15:16.320Z", "date_only": false, "value": "2020-10-16T23:15:16.320", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-16952", "record": "FKIE_CVE-2020-16952", "field": "published"}, {"timestamp": "2020-10-16T23:15:16.320Z", "date_only": false, "value": "2020-10-16T23:15:16.320", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2020-16952", "record": "GSD-2020-16952", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2020-10-17T16:09:38Z", "date_only": false, "value": "2020-10-17T16:09:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/2560", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "81a3021a-2ddc-447b-837e-28894c45b550", "content": "\u25a0\u25a0\u25a1\u25a1\u25a1 UK NCSC recommends organizations to fix CVE-2020-16952 SharePoint RCE flaw ASAP.\n\nhttps://securityaffairs.co/wordpress/109609/security/ncsc-cve-2020-16952-sharepoint-rce.html", "url": "https://t.me/cKure/2560"}, {"timestamp": "2020-10-19T14:32:14Z", "date_only": false, "value": "2020-10-19T14:32:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_ssi_viewstate.rb", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "226d1905-9883-4404-a5d3-45594730069e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_ssi_viewstate.rb"}, {"timestamp": "2020-10-28T00:00:00Z", "date_only": true, "value": "2020-10-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-59736", "record": "CNVD-2020-59736", "field": "submitTime"}, {"timestamp": "2020-10-31T00:00:00Z", "date_only": true, "value": "2020-10-31", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-59736", "record": "CNVD-2020-59736", "field": "openTime"}, {"timestamp": "2020-12-29T14:05:21Z", "date_only": false, "value": "2020-12-29T14:05:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/1913", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "63069939-1b9f-4ca0-ae3c-92d551300c41", "content": "#Red_Team_Tactics\n1. Code execution via the Windows Update client (wuauclt)\nhttps://dtm.uk/wuauclt\n2. PoC for MS SharePoint Server 2019 DataFormWebPart CreateChildControls Server-Side Include RCE Vulnerability (CVE-2020-16952)\nhttps://srcincite.io/pocs/cve-2020-16952.py.txt\n3. Exploiting CVE-2020-25213 - wp-file-manager wordpress plugin (<6.9) for unauthenticated arbitrary file upload\nhttps://medium.com/@mansoorr/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8\nPoC:\ncurl -ks --max-time 5 -F \"reqid=17457a1fe6959\" -F \"cmd=upload\" -F \"target=l1_Lw\" -F \"mtime[]=1576045135\" -F \"upload[]=@/$file_upload\" \"hxxps://victim.com/wp-content/plugins/wp-file-manager/lib/php/connector.minimal.php\"\nhttps://github.com/mansoorr123/wp-file-manager-CVE-2020-25213", "url": "https://t.me/CyberSecurityTechnologies/1913"}, {"timestamp": "2022-05-24T17:31:01Z", "date_only": false, "value": "2022-05-24T17:31:01Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4XG2-WCMM-2J45", "record": "GHSA-4XG2-WCMM-2J45", "field": "published"}, {"timestamp": "2023-12-13T01:21:46.598Z", "date_only": false, "value": "2023-12-13T01:21:46.598114Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-16952", "record": "GSD-2020-16952", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-31T19:20:22.131Z", "date_only": false, "value": "2023-12-31T19:20:22.131Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2020-16952", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-31T20:15:57.903Z", "date_only": false, "value": "2023-12-31T20:15:57.903", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-16952", "record": "GSD-2020-16952", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2023-12-31T21:30:23Z", "date_only": false, "value": "2023-12-31T21:30:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4XG2-WCMM-2J45", "record": "GHSA-4XG2-WCMM-2J45", "field": "modified"}, {"timestamp": "2024-08-04T13:45:34.837Z", "date_only": false, "value": "2024-08-04T13:45:34.837Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-16952", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T13:45:34.837Z", "date_only": false, "value": "2024-08-04T13:45:34.837Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-16952", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:44Z", "date_only": false, "value": "2025-02-06T03:13:44.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "da01ed26-c69c-4bc9-84cd-14c357cff426"}, {"timestamp": "2025-02-23T04:10:25Z", "date_only": false, "value": "2025-02-23T04:10:25.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "ee23ea99-6193-4a4e-813f-cc1b4acd2c63"}, {"timestamp": "2026-06-17T02:58:20.580Z", "date_only": false, "value": "2026-06-17T02:58:20.580", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-16952", "record": "FKIE_CVE-2020-16952", "field": "lastModified"}, {"timestamp": "2026-07-16T14:00:04.244Z", "date_only": false, "value": "2026-07-16T14:00:04.244771Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Unidentified_TM/910", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "ca6896cb-24c6-41f9-bdb0-8d5d00be6397", "url": "https://t.me/Unidentified_TM/910"}, {"timestamp": "2026-07-17T00:00:52.437Z", "date_only": false, "value": "2026-07-17T00:00:52.437491Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Unidentified_TM/910", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "5e45c434-8f7b-4a2e-8882-63d5dfa9c394", "url": "https://t.me/Unidentified_TM/910"}, {"timestamp": "2026-07-29T12:03:03.230Z", "date_only": false, "value": "2026-07-29T12:03:03.230700Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/526", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "2a7bcc03-0c11-4765-a3bb-5dc4c372c8e1", "url": "https://t.me/reverseame/526"}, {"timestamp": "2026-07-30T00:02:51.529Z", "date_only": false, "value": "2026-07-30T00:02:51.529833Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/526", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "3f0a2a3f-fd2d-4342-b3e8-970364b0f547", "url": "https://t.me/reverseame/526"}, {"timestamp": "2026-08-03T15:00:05.239Z", "date_only": false, "value": "2026-08-03T15:00:05.239358Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/526", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "2eb4b86d-4dc0-463f-be5b-92cb23c81967", "url": "https://t.me/reverseame/526"}, {"timestamp": "2026-08-04T00:00:35.297Z", "date_only": false, "value": "2026-08-04T00:00:35.297719Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/526", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "5b2c1849-490b-49f5-86fd-29b329e1860a", "url": "https://t.me/reverseame/526"}, {"timestamp": "2026-09-04T08:00:05.287Z", "date_only": false, "value": "2026-09-04T08:00:05.287713Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/timcore_hacking/1025", "record": "CVE-2020-16952", "field": "creation_timestamp", "uuid": "ef261907-4311-456f-b795-e253389d2fb0", "url": "https://t.me/timcore_hacking/1025"}]}