{"metadata": {"vulnerability": "cve-2021-40870", "count": 59, "kinds": {"milestone": 4, "sighting": 22, "kev": 17, "other": 16}}, "data": [{"timestamp": "2021-09-13T00:00:00Z", "date_only": false, "value": "2021-09-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2021-40870", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-09-13T07:41:55Z", "date_only": false, "value": "2021-09-13T07:41:55.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2021-40870", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-09-13T08:15:00Z", "date_only": false, "value": "2021-09-13T08:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W7MG-Q4HH-M9CQ", "record": "GHSA-W7MG-Q4HH-M9CQ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-09-13T08:15:00Z", "date_only": false, "value": "2021-09-13T08:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-40870", "record": "GSD-2021-40870", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-09-13T08:15:13.913Z", "date_only": false, "value": "2021-09-13T08:15:13.913", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-40870", "record": "FKIE_CVE-2021-40870", "field": "published"}, {"timestamp": "2021-10-09T14:57:59Z", "date_only": false, "value": "2021-10-09T14:57:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/7558", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "0eb441d3-cb00-4421-91d1-17112110c5ef", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2021-40870 Exploitation.\n\nAn issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.\n\nhttps://github.com/0xAgun/CVE-2021-40870", "url": "https://t.me/cKure/7558"}, {"timestamp": "2021-10-11T15:06:10Z", "date_only": false, "value": "2021-10-11T15:06:10.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2021-40870", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2021-40870", "field": "timestamps.asserted_at", "uuid": "97ed6fd6-4055-4a7f-b61f-4ce78ffe3ac8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2021-40870", "field": "timestamps.asserted_at", "uuid": "98cb5383-6c08-4f58-8f0f-5fac98fd55fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-40870", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "other", "label": "Catalog added", "source": "gsd \u00b7 GSD-2021-40870", "record": "GSD-2021-40870", "field": "namespaces.cisa.gov.dateAdded"}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2021-40870", "field": "evidence.0.details.added_date", "uuid": "98cb5383-6c08-4f58-8f0f-5fac98fd55fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": true, "value": "2022-01-18", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2021-40870", "field": "evidence.0.details.date_added", "uuid": "97ed6fd6-4055-4a7f-b61f-4ce78ffe3ac8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2021-40870", "field": "timestamps.first_seen_at", "uuid": "97ed6fd6-4055-4a7f-b61f-4ce78ffe3ac8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2021-40870", "field": "timestamps.first_seen_at", "uuid": "98cb5383-6c08-4f58-8f0f-5fac98fd55fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2021-40870", "field": "status.status_updated_at", "uuid": "97ed6fd6-4055-4a7f-b61f-4ce78ffe3ac8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2021-40870", "field": "status.status_updated_at", "uuid": "98cb5383-6c08-4f58-8f0f-5fac98fd55fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-01-18T00:00:00Z", "date_only": false, "value": "2022-01-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-40870", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-02-01T00:00:00Z", "date_only": true, "value": "2022-02-01", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2021-40870", "field": "evidence.0.details.due_date", "uuid": "97ed6fd6-4055-4a7f-b61f-4ce78ffe3ac8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-02-01T00:00:00Z", "date_only": true, "value": "2022-02-01", "kind": "other", "label": "Remediation due", "source": "gsd \u00b7 GSD-2021-40870", "record": "GSD-2021-40870", "field": "namespaces.cisa.gov.dueDate"}, {"timestamp": "2022-05-24T19:14:21Z", "date_only": false, "value": "2022-05-24T19:14:21Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W7MG-Q4HH-M9CQ", "record": "GHSA-W7MG-Q4HH-M9CQ", "field": "published"}, {"timestamp": "2022-06-28T14:11:00Z", "date_only": false, "value": "2022-06-28T14:11Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-40870", "record": "GSD-2021-40870", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "8b97ee8e-1a56-4ef1-b265-198a050b533d"}, {"timestamp": "2023-10-14T17:35:29Z", "date_only": false, "value": "2023-10-14T17:35:29+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2021-40870", "field": "timestamps.asserted_at", "uuid": "65344378-efce-4e76-9226-93fce10beb7a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T17:35:29Z", "date_only": false, "value": "2023-10-14T17:35:29+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2021-40870", "field": "timestamps.first_seen_at", "uuid": "65344378-efce-4e76-9226-93fce10beb7a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-04T07:43:01Z", "date_only": false, "value": "2023-12-04T07:43:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1149", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "90d1da68-9884-4751-ac82-f08cb20243a1", "content": "#ExploitObserverAlert\n\nCVE-2021-40870\n\nDESCRIPTION: Exploit Observer has 19 entries related to CVE-2021-40870. An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal.\n\nFIRST-EPSS: 0.908800000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1149"}, {"timestamp": "2023-12-13T01:23:25.181Z", "date_only": false, "value": "2023-12-13T01:23:25.181262Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-40870", "record": "GSD-2021-40870", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T02:51:07.712Z", "date_only": false, "value": "2024-08-04T02:51:07.712Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2021-40870", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:26:03.533Z", "date_only": false, "value": "2024-12-24T20:26:03.533671Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971219", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "350eeb7f-0ab0-4684-b2a2-caa79019e180", "url": "https://feedsin.space/feed/CISAKevBot/items/2971219"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "46a6a09c-e7a1-42b4-b05a-038a763f098d"}, {"timestamp": "2025-02-04T19:36:42.719Z", "date_only": false, "value": "2025-02-04T19:36:42.719277Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-40870", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T19:36:42.719Z", "date_only": false, "value": "2025-02-04T19:36:42.719277Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-40870", "record": "FKIE_CVE-2021-40870", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-23T02:10:32Z", "date_only": false, "value": "2025-02-23T02:10:32.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "3c671520-d325-4561-8bd5-d1bc99f0133e"}, {"timestamp": "2025-06-05T00:00:00Z", "date_only": false, "value": "2025-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "6b312446-cedd-46df-81df-c48d63d82555"}, {"timestamp": "2025-07-15T00:00:00Z", "date_only": false, "value": "2025-07-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-15)", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "4195ad58-7f58-41e0-a5c5-ea0e781197ac"}, {"timestamp": "2025-08-21T00:00:00Z", "date_only": false, "value": "2025-08-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-21)", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "4d63e4e3-842f-414e-ba6d-8a68c58cfc92"}, {"timestamp": "2025-08-31T00:00:00Z", "date_only": false, "value": "2025-08-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-31)", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "6979cc3c-5bbf-4f8c-b125-88b2e9987b3e"}, {"timestamp": "2025-10-21T23:25:33.924Z", "date_only": false, "value": "2025-10-21T23:25:33.924Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2021-40870", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:25:33.924Z", "date_only": false, "value": "2025-10-21T23:25:33.924Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2021-40870", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:19Z", "date_only": false, "value": "2025-10-22T00:32:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W7MG-Q4HH-M9CQ", "record": "GHSA-W7MG-Q4HH-M9CQ", "field": "modified"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "0d86787e-b1c8-430f-afe2-1f4d9660e1d9"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "a16b469c-0616-420c-a1e4-00df12370a9c"}, {"timestamp": "2026-02-02T12:28:27.470Z", "date_only": false, "value": "2026-02-02T12:28:27.470419Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d9a206d-a963-488f-b4a6-a23d16065d74", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "c2f4a79c-3264-4d42-ab94-19d92ebfde40", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d9a206d-a963-488f-b4a6-a23d16065d74"}, {"timestamp": "2026-02-02T12:28:27.470Z", "date_only": false, "value": "2026-02-02T12:28:27.470419Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d9a206d-a963-488f-b4a6-a23d16065d74", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "afdb16ea-a3e4-442c-8aa3-9c9bf1704039", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d9a206d-a963-488f-b4a6-a23d16065d74"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2021-40870", "field": "timestamps.recorded_at", "uuid": "97ed6fd6-4055-4a7f-b61f-4ce78ffe3ac8", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "6a68fb50-daa3-42b3-8c40-5661198c4abd"}, {"timestamp": "2026-06-17T04:07:34.377Z", "date_only": false, "value": "2026-06-17T04:07:34.377", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-40870", "record": "FKIE_CVE-2021-40870", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:40.962Z", "date_only": false, "value": "2026-06-19T12:47:40.962070Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98bd3a36-f997-47e3-a5e4-88e446233203", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "c0d2f9d4-f014-492f-8f7a-aa0f3ad16f58", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98bd3a36-f997-47e3-a5e4-88e446233203"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2021-40870", "field": "timestamps.recorded_at", "uuid": "98cb5383-6c08-4f58-8f0f-5fac98fd55fd", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:27.990Z", "date_only": false, "value": "2026-06-23T11:13:27.990994Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/98cb5383-6c08-4f58-8f0f-5fac98fd55fd", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "b92932c9-71ef-46fd-a079-22e899228247", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/98cb5383-6c08-4f58-8f0f-5fac98fd55fd"}, {"timestamp": "2026-06-23T14:04:54.038Z", "date_only": false, "value": "2026-06-23T14:04:54.038041Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d67d78dc-d6c1-449f-8e22-b72cda153f59", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "ddfa74be-651c-4e35-a1dc-ada1bf320a65", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d67d78dc-d6c1-449f-8e22-b72cda153f59"}, {"timestamp": "2026-06-30T09:23:38.100Z", "date_only": false, "value": "2026-06-30T09:23:38.100265Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/634e4df2-7b4d-4428-ba3b-01bf8d7b598f", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "dac67ce2-a349-4101-b11c-76dbd10f283f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/634e4df2-7b4d-4428-ba3b-01bf8d7b598f"}, {"timestamp": "2026-07-01T05:54:11.947Z", "date_only": false, "value": "2026-07-01T05:54:11.947895Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/65344378-efce-4e76-9226-93fce10beb7a", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "2cf38eab-1691-47c1-9b8a-89bb0e236d28", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/65344378-efce-4e76-9226-93fce10beb7a"}, {"timestamp": "2026-08-09T05:01:07.235Z", "date_only": false, "value": "2026-08-09T05:01:07.235379Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/1801", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "62fd583a-c153-4b89-89a9-9ed8a8568d05", "url": "https://t.me/onelab1337/1801"}, {"timestamp": "2026-08-10T00:00:11.772Z", "date_only": false, "value": "2026-08-10T00:00:11.772719Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/1801", "record": "CVE-2021-40870", "field": "creation_timestamp", "uuid": "c2a248a2-2d38-4467-be05-2bd9ebe22e3c", "url": "https://t.me/onelab1337/1801"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2021-40870", "field": "timestamps.last_seen_at", "uuid": "65344378-efce-4e76-9226-93fce10beb7a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2021-40870", "field": "evidence.0.details.observation_date", "uuid": "65344378-efce-4e76-9226-93fce10beb7a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2021-40870", "field": "status.status_updated_at", "uuid": "65344378-efce-4e76-9226-93fce10beb7a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:03:44Z", "date_only": false, "value": "2026-10-21T09:03:44+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2021-40870", "field": "timestamps.recorded_at", "uuid": "65344378-efce-4e76-9226-93fce10beb7a", "status": {"status_reason": "confirmed", "exploited": true}}]}