{"metadata": {"vulnerability": "cve-2021-25830", "count": 19, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 11}}, "data": [{"timestamp": "2021-01-22T00:00:00Z", "date_only": false, "value": "2021-01-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-25830", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-03-01T15:07:38Z", "date_only": false, "value": "2021-03-01T15:07:38.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-25830", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-03-01T16:15:00Z", "date_only": false, "value": "2021-03-01T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5MVF-VVH4-MJ9C", "record": "GHSA-5MVF-VVH4-MJ9C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-03-01T16:15:00Z", "date_only": false, "value": "2021-03-01T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-25830", "record": "GSD-2021-25830", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-03-01T16:15:14.293Z", "date_only": false, "value": "2021-03-01T16:15:14.293", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25830", "record": "FKIE_CVE-2021-25830", "field": "published"}, {"timestamp": "2021-03-01T18:43:22Z", "date_only": false, "value": "2021-03-01T18:43:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/24301", "record": "CVE-2021-25830", "field": "creation_timestamp", "uuid": "ad60e1f4-0eb9-4c2b-9a82-741172e23cc0", "content": "\u203c CVE-2021-25830 \u203c\n\nA file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/24301"}, {"timestamp": "2021-03-02T00:00:00Z", "date_only": true, "value": "2021-03-02", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-17247", "record": "CNVD-2021-17247", "field": "submitTime"}, {"timestamp": "2021-03-02T12:27:59Z", "date_only": false, "value": "2021-03-02T12:27:59.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2021-25830", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-03-13T00:00:00Z", "date_only": true, "value": "2021-03-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-17247", "record": "CNVD-2021-17247", "field": "openTime"}, {"timestamp": "2021-03-15T19:53:00Z", "date_only": false, "value": "2021-03-15T19:53Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-25830", "record": "GSD-2021-25830", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-10-30T14:32:34Z", "date_only": false, "value": "2021-10-30T14:32:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/4625", "record": "CVE-2021-25830", "field": "creation_timestamp", "uuid": "292ee7df-e0da-45d8-a835-97e309585edc", "content": "#exploit\n1. CVE-2021-31862:\nSysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication\nhttps://github.com/RobertDra/CVE-2021-31862\n\n2. Research and PoC exploits for ONLYOFFICE\n(CVE-2021-25829, CVE-2021-25830, CVE-2021-25831, CVE-2021-25832, CVE-2021-25833)\nhttps://github.com/merrychap/POC-onlyoffice/tree/master", "url": "https://t.me/CyberSecurityTechnologies/4625"}, {"timestamp": "2022-05-24T17:43:25Z", "date_only": false, "value": "2022-05-24T17:43:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5MVF-VVH4-MJ9C", "record": "GHSA-5MVF-VVH4-MJ9C", "field": "published"}, {"timestamp": "2022-05-24T17:43:25Z", "date_only": false, "value": "2022-05-24T17:43:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5MVF-VVH4-MJ9C", "record": "GHSA-5MVF-VVH4-MJ9C", "field": "modified"}, {"timestamp": "2023-12-13T01:23:21.396Z", "date_only": false, "value": "2023-12-13T01:23:21.396049Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-25830", "record": "GSD-2021-25830", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T20:11:28.461Z", "date_only": false, "value": "2024-08-03T20:11:28.461Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-25830", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T20:11:28.461Z", "date_only": false, "value": "2024-08-03T20:11:28.461Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-25830", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:42:29.270Z", "date_only": false, "value": "2026-06-17T03:42:29.270", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-25830", "record": "FKIE_CVE-2021-25830", "field": "lastModified"}, {"timestamp": "2026-09-01T17:00:36.984Z", "date_only": false, "value": "2026-09-01T17:00:36.984175Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/4713", "record": "CVE-2021-25830", "field": "creation_timestamp", "uuid": "79d85a56-68b6-4fcc-b584-eef9d699fa09", "url": "https://t.me/cissp/4713"}, {"timestamp": "2026-09-10T16:00:05.481Z", "date_only": false, "value": "2026-09-10T16:00:05.481907Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/4713", "record": "CVE-2021-25830", "field": "creation_timestamp", "uuid": "2ce86d82-9b0f-4dbd-b077-99efdf58507e", "url": "https://t.me/cissp/4713"}]}