{"metadata": {"vulnerability": "cve-2022-26137", "count": 27, "kinds": {"milestone": 4, "sighting": 8, "kev": 0, "other": 15}}, "data": [{"timestamp": "2022-02-25T00:00:00Z", "date_only": false, "value": "2022-02-25T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-26137", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-20T00:00:00Z", "date_only": false, "value": "2022-07-20T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / atlassian", "record": "cve-2022-26137", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-07-20T00:00:00Z", "date_only": false, "value": "2022-07-20T00:00:00", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-26137", "record": "GSD-2022-26137", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC", "linked_record": true}, {"timestamp": "2022-07-20T00:00:00Z", "date_only": false, "value": "2022-07-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2022-26137", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-07-20T17:25:23Z", "date_only": false, "value": "2022-07-20T17:25:23.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / atlassian", "record": "cve-2022-26137", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-07-20T17:25:23.603Z", "date_only": false, "value": "2022-07-20T17:25:23.603Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-26137", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-07-20T18:15:00Z", "date_only": false, "value": "2022-07-20T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FPJ5-PCGC-34G7", "record": "GHSA-FPJ5-PCGC-34G7", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-07-20T18:15:00Z", "date_only": false, "value": "2022-07-20T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26137", "record": "GSD-2022-26137", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-07-20T18:15:08.557Z", "date_only": false, "value": "2022-07-20T18:15:08.557", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26137", "record": "FKIE_CVE-2022-26137", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-07-20T22:12:13Z", "date_only": false, "value": "2022-07-20T22:12:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/46713", "record": "CVE-2022-26137", "field": "creation_timestamp", "uuid": "77e05ee7-0f3c-49a5-8d2e-6b5c2f61cb3b", "content": "\u203c CVE-2022-26137 \u203c\n\nA vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses. Atlassian has confirmed and fixed the only known security issue associated with this vulnerability: Cross-origin resource sharing (CORS) bypass. Sending a specially crafted HTTP request can invoke the Servlet Filter used to respond to CORS requests, resulting in a CORS bypass. An attacker that can trick a user into requesting a malicious URL can access the vulnerable application with the victim\u00e2\u20ac\u2122s permissions. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/46713"}, {"timestamp": "2022-07-21T00:00:27Z", "date_only": false, "value": "2022-07-21T00:00:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FPJ5-PCGC-34G7", "record": "GHSA-FPJ5-PCGC-34G7", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-07-21T18:52:52Z", "date_only": false, "value": "2022-07-21T18:52:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/1043", "record": "CVE-2022-26137", "field": "creation_timestamp", "uuid": "28253c69-2614-4a16-ae94-62da6515ce44", "content": "\u200b\u26a1\ufe0f Atlasssian \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Confluence Server \u0438 Data Center.\n\n\ud83d\udcac \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-26138, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c, \u043f\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Questions for Confluence \u0434\u043b\u044f \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u0438\u043c\u0435\u043d\u0435\u043c disabledsystemuser. \u041e\u043d\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0433\u0440\u0443\u043f\u043f\u0443 confluence-users \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0441\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b Confluence, \u043a \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u0433\u0440\u0443\u043f\u043f\u0430.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u043d\u0430\u044e\u0449\u0438\u0439 \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c, \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438\u043c \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043b\u044e\u0431\u044b\u043c \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430\u043c \u0433\u0440\u0443\u043f\u043f\u044b confluence-users.\n\nAtlassian \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0443 \u043d\u0435\u0435 \u043d\u0435\u0442 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 CVE-2022-26138 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435. \u0418 \u0432\u0441\u0435 \u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430: \u00ab\u0416\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u00bb.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Atlassian \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043f\u0430\u0440\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440\u0430 \u0441\u0435\u0440\u0432\u043b\u0435\u0442\u043d\u044b\u0445 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 (\u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u0430\u043a CVE-2022-26136 \u0438 CVE-2022-26137), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438:\n\n\u2014 Bamboo Server and Data Center;\n\u2014 Bitbucket Server and Data Center;\n\u2014 Confluence Server and Data Center;\n\u2014 Crowd Server and Data Center;\n\u2014 Fisheye and Crucible;\n\u2014 Jira Server and Data Center;\n\u2014 Jira Service Management Server and Data Center.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 JavaScript \u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c Cross-origin resource sharing, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043f\u0435\u0440\u0432\u043e\u043f\u0440\u0438\u0447\u0438\u043d\u0443 CVE-2022-26137, \u043d\u043e \u043d\u0435 \u0432\u0441\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n#Atlassian #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ConfluenceServer #DataCenter\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/1043"}, {"timestamp": "2022-08-04T15:45:00Z", "date_only": false, "value": "2022-08-04T15:45Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26137", "record": "GSD-2022-26137", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-09-21T09:23:49Z", "date_only": false, "value": "2023-09-21T09:23:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/avleonovrus/48", "record": "CVE-2022-26137", "field": "creation_timestamp", "uuid": "d8092dba-c7f4-4922-9506-8a43ee715fa7", "content": "\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043c\u043d\u043e\u0433\u043e \u043f\u0438\u0448\u0443\u0442 \u043f\u0440\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Confluence. \u0418\u0445 \u0432\u044b\u0448\u043b\u043e \u0442\u0440\u0438. \n\nCVE-2022-26136 & CVE-2022-26137: Multiple Servlet Filter vulnerabilities (Authentication bypass, XSS, Cross-origin resource sharing bypass). \u041c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Atlassian \u0443\u044f\u0437\u0432\u0438\u043c\u043e. \u041a\u0440\u043e\u043c\u0435 Confluence \u0438 JIRA \u044d\u0442\u043e \u0435\u0449\u0451 \u0438 Bitbucket \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440. \u0422\u0443\u0442 \u0432\u0441\u0435 \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u043d\u0430\u0434\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u044c. \u041d\u0443 \u0438 \u0432 \u0438\u0434\u0435\u0430\u043b\u0435 \u0434\u0430\u0432\u043d\u043e \u043f\u043e\u0440\u0430 \u043e\u0442 \u044d\u0442\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043e\u0442\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c\u0441\u044f, \u0441\u0430\u043c\u0438 \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0435 \u043f\u043e\u0447\u0435\u043c\u0443.  \n\nCVE-2022-26138: Hardcoded password in Confluence Questions. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0439\u0447\u0430\u0441 \u0441\u0430\u043c\u0430\u044f \u0445\u0430\u0439\u043f\u043e\u0432\u0430\u044f \u0438 \u0437\u0430\u0431\u0430\u0432\u043d\u0430\u044f. \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0430\u043f\u043f\u0430 Questions \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u043b\u044e\u0435\u043d\u0441\u0430 \u0441\u043e\u0437\u0434\u0430\u0451\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f disabledsystemuser \u0441 \u0437\u0430\u0445\u0430\u0440\u0434\u043a\u043e\u0436\u0435\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c. \u0410 \u043e\u043d \u043d\u0435 disabled! \ud83e\udd21 \u041f\u0430\u0440\u043e\u043b\u044c \u0443\u0436\u0435 \u0432 \u043f\u0430\u0431\u043b\u0438\u043a\u0435. \u041f\u043e\u0434 \u044d\u0442\u0438\u043c \u044e\u0437\u0435\u0440\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 confluence-users. \u041d\u0443 \u043d\u0435 \u0441\u043c\u0435\u0445 \u043b\u0438? \ud83d\ude42 \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0430\u0442\u0447\u0438\u043d\u0433\u043e\u043c \u0438\u043b\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u043e\u0439/\u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0422\u0443\u0442 \u0447\u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c:\n1. \u041f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0437\u043b\u043e, \u0442\u0430\u043c \u043e\u0431\u044b\u0447\u043d\u043e \u0441\u0430\u043c\u043e\u0435 \u0430\u0434\u0438\u0449\u0435.\n2. \u0412\u043e\u0442 \u043a\u0430\u043a-\u0442\u043e \u0442\u0430\u043a \u043c\u043e\u0433\u0443\u0442 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0438 \u0432 \u041f\u041e. \u041e\u0447\u0435\u043d\u044c \u043f\u0440\u043e\u0441\u0442\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u0432\u0441\u0435\u0433\u0434\u0430 \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e \u043e\u0439, \u0438\u0437\u0432\u0438\u043d\u0438\u0442\u0435, \u044d\u0442\u043e \u043e\u0448\u0438\u0431\u043a\u0430. \n3. \u0422\u0435, \u043a\u0442\u043e Confluence \u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u0441\u0430\u043c\u0438 \u0441\u0435\u0431\u0435 \u0437\u043b\u043e\u0431\u043d\u044b\u0435 \u0431\u0443\u0440\u0430\u0442\u0438\u043d\u044b.\n\n@avleonovrus #VMnews #Atlassian #Confluence", "url": "https://t.me/avleonovrus/48"}, {"timestamp": "2023-12-13T01:19:38.806Z", "date_only": false, "value": "2023-12-13T01:19:38.806428Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26137", "record": "GSD-2022-26137", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-08-03T04:56:37.614Z", "date_only": false, "value": "2024-08-03T04:56:37.614Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-26137", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-03T16:48:52.174Z", "date_only": false, "value": "2024-10-03T16:48:52.174175Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-26137", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-10-03T16:48:52.174Z", "date_only": false, "value": "2024-10-03T16:48:52.174175Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26137", "record": "FKIE_CVE-2022-26137", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-10-03T17:10:16.886Z", "date_only": false, "value": "2024-10-03T17:10:16.886Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-26137", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-10-03T17:10:16.886Z", "date_only": false, "value": "2024-10-03T17:10:16.886Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-26137", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-03T18:30:34Z", "date_only": false, "value": "2024-10-03T18:30:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FPJ5-PCGC-34G7", "record": "GHSA-FPJ5-PCGC-34G7", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T04:34:45.773Z", "date_only": false, "value": "2026-06-17T04:34:45.773", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26137", "record": "FKIE_CVE-2022-26137", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-26T02:02:46.272Z", "date_only": false, "value": "2026-07-26T02:02:46.272502Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/475", "record": "CVE-2022-26137", "field": "creation_timestamp", "uuid": "55684888-98b6-4b81-b6ac-432bb1c9a8dd", "url": "https://t.me/EchelonEyes/475"}, {"timestamp": "2026-07-27T00:01:20.543Z", "date_only": false, "value": "2026-07-27T00:01:20.543400Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/475", "record": "CVE-2022-26137", "field": "creation_timestamp", "uuid": "f917b4f3-42a4-4526-ade6-cdcc45605663", "url": "https://t.me/EchelonEyes/475"}, {"timestamp": "2026-07-28T12:00:05.668Z", "date_only": false, "value": "2026-07-28T12:00:05.668002Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/475", "record": "CVE-2022-26137", "field": "creation_timestamp", "uuid": "b18aea02-869c-4dc4-b014-e11951037694", "url": "https://t.me/EchelonEyes/475"}, {"timestamp": "2026-07-29T00:00:38.171Z", "date_only": false, "value": "2026-07-29T00:00:38.171657Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/475", "record": "CVE-2022-26137", "field": "creation_timestamp", "uuid": "4e4056bd-1b4a-4ef5-9625-efad0add00bb", "url": "https://t.me/EchelonEyes/475"}, {"timestamp": "2026-09-01T20:01:34.160Z", "date_only": false, "value": "2026-09-01T20:01:34.160764Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/62491", "record": "CVE-2022-26137", "field": "creation_timestamp", "uuid": "88a35f8a-6034-46b7-a8cd-1f1cf57c04a8", "url": "https://t.me/hacking_Attack/62491"}], "metrics": {"as_of": "2026-11-15T10:15:01.067Z", "anchors": {"origin": {"timestamp": "2022-07-20T00:00:00Z", "date_only": false, "value": "2022-07-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2022-26137", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-07-20T00:00:00Z", "date_only": false, "value": "2022-07-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2022-26137", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 136462501.067386, "hours": 37906.25029649611, "days": 1579.427095687338, "min_seconds": 136376101.067386, "max_seconds": 136462501.067386, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-07-20T00:00:00Z", "date_only": false, "value": "2022-07-20T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / atlassian", "record": "cve-2022-26137", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T10:15:01.067Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}