{"metadata": {"vulnerability": "cve-2021-39156", "count": 35, "kinds": {"milestone": 6, "sighting": 2, "kev": 0, "other": 27}}, "data": [{"timestamp": "2021-08-16T00:00:00Z", "date_only": false, "value": "2021-08-16T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-39156", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-08-24T00:00:00Z", "date_only": false, "value": "2021-08-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:3272", "record": "RHSA-2021:3272", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-08-24T00:00:00Z", "date_only": false, "value": "2021-08-24T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2021:3273", "record": "RHSA-2021:3273", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2021-08-24T00:00:00Z", "date_only": true, "value": "2021-08-24", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-39156", "record": "GSD-2021-39156", "field": "namespaces.gitlab.com.advisories.1.pubdate"}, {"timestamp": "2021-08-24T19:00:00Z", "date_only": false, "value": "2021-08-24T19:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:3272", "record": "RHSA-2021:3272", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-08-24T19:00:00Z", "date_only": false, "value": "2021-08-24T19:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2021:3273", "record": "RHSA-2021:3273", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2021-08-24T22:30:12Z", "date_only": false, "value": "2021-08-24T22:30:12.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-39156", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-08-24T22:30:12Z", "date_only": false, "value": "2021-08-24T22:30:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2021-39156", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-08-24T23:15:00Z", "date_only": false, "value": "2021-08-24T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HQXW-MM44-GC4R", "record": "GHSA-HQXW-MM44-GC4R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-08-24T23:15:00Z", "date_only": false, "value": "2021-08-24T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-39156", "record": "GSD-2021-39156", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-08-24T23:15:10.413Z", "date_only": false, "value": "2021-08-24T23:15:10.413", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39156", "record": "FKIE_CVE-2021-39156", "field": "published"}, {"timestamp": "2021-08-25T02:37:41Z", "date_only": false, "value": "2021-08-25T02:37:41.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/27856", "record": "CVE-2021-39156", "field": "creation_timestamp", "uuid": "735ef3c0-252a-44f1-abf3-72f21310fded", "content": "\u203c CVE-2021-39156 \u203c\n\nIstio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a remotely exploitable vulnerability where an HTTP request with `#fragment` in the path may bypass Istio\u00c3\u00a2\u00e2\u201a\u00ac\u00e2\u201e\u00a2s URI path based authorization policies. Patches are available in Istio 1.11.1, Istio 1.10.4 and Istio 1.9.8. As a work around a Lua filter may be written to normalize the path.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/27856"}, {"timestamp": "2021-08-25T09:37:20Z", "date_only": false, "value": "2021-08-25T09:37:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:3273", "record": "RHSA-2021:3273", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-08-25T09:37:20Z", "date_only": false, "value": "2021-08-25T09:37:20+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:3273", "record": "RHSA-2021:3273", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-08-25T09:37:20Z", "date_only": false, "value": "2021-08-25T09:37:20+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:3273", "record": "RHSA-2021:3273", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-08-25T09:37:49Z", "date_only": false, "value": "2021-08-25T09:37:49+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:3272", "record": "RHSA-2021:3272", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-08-25T09:37:49Z", "date_only": false, "value": "2021-08-25T09:37:49+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2021:3272", "record": "RHSA-2021:3272", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2021-08-25T09:37:49Z", "date_only": false, "value": "2021-08-25T09:37:49+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2021:3272", "record": "RHSA-2021:3272", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-08-30T00:00:00Z", "date_only": true, "value": "2021-08-30", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-39156", "record": "GSD-2021-39156", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-08-30T16:16:14Z", "date_only": false, "value": "2021-08-30T16:16:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HQXW-MM44-GC4R", "record": "GHSA-HQXW-MM44-GC4R", "field": "published"}, {"timestamp": "2021-10-21T00:00:00Z", "date_only": true, "value": "2021-10-21", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-39156", "record": "GSD-2021-39156", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-08-12T00:00:00Z", "date_only": true, "value": "2022-08-12", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-39156", "record": "GSD-2021-39156", "field": "namespaces.gitlab.com.advisories.1.date"}, {"timestamp": "2022-08-12T18:01:00Z", "date_only": false, "value": "2022-08-12T18:01Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-39156", "record": "GSD-2021-39156", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-08-15T20:04:30Z", "date_only": false, "value": "2022-08-15T20:04:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HQXW-MM44-GC4R", "record": "GHSA-HQXW-MM44-GC4R", "field": "modified"}, {"timestamp": "2023-12-13T01:23:16.024Z", "date_only": false, "value": "2023-12-13T01:23:16.024710Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-39156", "record": "GSD-2021-39156", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T01:58:18.136Z", "date_only": false, "value": "2024-08-04T01:58:18.136Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-39156", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T01:58:18.136Z", "date_only": false, "value": "2024-08-04T01:58:18.136Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-39156", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-25T01:12:22Z", "date_only": false, "value": "2025-07-25T01:12:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ferasdour/504aa49686f8e64564249de44cd5eab2", "record": "CVE-2021-39156", "field": "creation_timestamp", "uuid": "e64c459f-b07f-4dab-9044-eb856ff69d57", "url": "https://gist.github.com/ferasdour/504aa49686f8e64564249de44cd5eab2"}, {"timestamp": "2026-03-18T02:07:01Z", "date_only": false, "value": "2026-03-18T02:07:01+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:3272", "record": "RHSA-2021:3272", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-18T02:07:01Z", "date_only": false, "value": "2026-03-18T02:07:01+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:3272", "record": "RHSA-2021:3272", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-18T02:07:01Z", "date_only": false, "value": "2026-03-18T02:07:01+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:3272", "record": "RHSA-2021:3272", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-18T02:07:04Z", "date_only": false, "value": "2026-03-18T02:07:04+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2021:3273", "record": "RHSA-2021:3273", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-03-18T02:07:04Z", "date_only": false, "value": "2026-03-18T02:07:04+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2021:3273", "record": "RHSA-2021:3273", "field": "document.tracking.generator.date"}, {"timestamp": "2026-03-18T02:07:04Z", "date_only": false, "value": "2026-03-18T02:07:04+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2021:3273", "record": "RHSA-2021:3273", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T04:03:12.743Z", "date_only": false, "value": "2026-06-17T04:03:12.743", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-39156", "record": "FKIE_CVE-2021-39156", "field": "lastModified"}]}