{"metadata": {"vulnerability": "cve-2020-26223", "count": 19, "kinds": {"milestone": 5, "sighting": 1, "kev": 0, "other": 13}}, "data": [{"timestamp": "2020-10-01T00:00:00Z", "date_only": false, "value": "2020-10-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2020-26223", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": true, "value": "2020-11-13", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-26223", "record": "GSD-2020-26223", "field": "namespaces.github.com/rubysec/ruby-advisory-db.date"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": true, "value": "2020-11-13", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2020-26223", "record": "GSD-2020-26223", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2020-26223", "record": "GSD-2020-26223", "field": "gsd.osvSchema.published"}, {"timestamp": "2020-11-13T00:00:00Z", "date_only": false, "value": "2020-11-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-26223", "record": "GSD-2020-26223", "field": "gsd.osvSchema.modified"}, {"timestamp": "2020-11-13T17:18:22Z", "date_only": false, "value": "2020-11-13T17:18:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M2JR-HMC3-QMPR", "record": "GHSA-M2JR-HMC3-QMPR", "field": "published"}, {"timestamp": "2020-11-13T17:25:20Z", "date_only": false, "value": "2020-11-13T17:25:20.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2020-26223", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-11-13T17:25:20Z", "date_only": false, "value": "2020-11-13T17:25:20.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2020-26223", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-11-13T18:15:00Z", "date_only": false, "value": "2020-11-13T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-26223", "record": "GSD-2020-26223", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-11-13T18:15:12.777Z", "date_only": false, "value": "2020-11-13T18:15:12.777", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26223", "record": "FKIE_CVE-2020-26223", "field": "published"}, {"timestamp": "2020-11-13T20:33:46Z", "date_only": false, "value": "2020-11-13T20:33:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/16316", "record": "CVE-2020-26223", "field": "creation_timestamp", "uuid": "ac4fac16-08b6-4088-a37f-e1256f7830c6", "content": "\u203c CVE-2020-26223 \u203c\n\nSpree is a complete open source e-commerce solution built with Ruby on Rails. In Spree from version 3.7 and before versions 3.7.13, 4.0.5, and 4.1.12, there is an authorization bypass vulnerability. The perpetrator could query the API v2 Order Status endpoint with an empty string passed as an Order token. This is patched in versions 3.7.11, 4.0.4, or 4.1.11 depending on your used Spree version. Users of Spree < 3.7 are not affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/16316"}, {"timestamp": "2020-11-16T00:00:00Z", "date_only": true, "value": "2020-11-16", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2020-66283", "record": "CNVD-2020-66283", "field": "submitTime"}, {"timestamp": "2020-11-24T00:00:00Z", "date_only": true, "value": "2020-11-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2020-66283", "record": "CNVD-2020-66283", "field": "openTime"}, {"timestamp": "2020-11-30T00:00:00Z", "date_only": true, "value": "2020-11-30", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2020-26223", "record": "GSD-2020-26223", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2020-11-30T16:18:00Z", "date_only": false, "value": "2020-11-30T16:18Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-26223", "record": "GSD-2020-26223", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-16T16:19:18Z", "date_only": false, "value": "2023-05-16T16:19:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M2JR-HMC3-QMPR", "record": "GHSA-M2JR-HMC3-QMPR", "field": "modified"}, {"timestamp": "2024-08-04T15:49:07.219Z", "date_only": false, "value": "2024-08-04T15:49:07.219Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2020-26223", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T15:49:07.219Z", "date_only": false, "value": "2024-08-04T15:49:07.219Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2020-26223", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:07:51.423Z", "date_only": false, "value": "2026-06-17T03:07:51.423", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-26223", "record": "FKIE_CVE-2020-26223", "field": "lastModified"}]}