{"metadata": {"vulnerability": "cve-2022-26159", "count": 16, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 9}}, "data": [{"timestamp": "2022-02-28T00:00:00Z", "date_only": false, "value": "2022-02-28T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-26159", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-28T03:53:46Z", "date_only": false, "value": "2022-02-28T03:53:46.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-26159", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-28T04:15:00Z", "date_only": false, "value": "2022-02-28T04:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HH28-49MM-87QV", "record": "GHSA-HH28-49MM-87QV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-28T04:15:00Z", "date_only": false, "value": "2022-02-28T04:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-26159", "record": "GSD-2022-26159", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-28T04:15:07.123Z", "date_only": false, "value": "2022-02-28T04:15:07.123", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26159", "record": "FKIE_CVE-2022-26159", "field": "published"}, {"timestamp": "2022-02-28T07:22:54Z", "date_only": false, "value": "2022-02-28T07:22:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/38168", "record": "CVE-2022-26159", "field": "creation_timestamp", "uuid": "1faa0f2d-aa52-444b-b9c1-15ab642f34be", "content": "\u203c CVE-2022-26159 \u203c\n\nThe auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/38168"}, {"timestamp": "2022-02-28T18:11:46Z", "date_only": false, "value": "2022-02-28T18:11:46.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-26159", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-01T00:00:34Z", "date_only": false, "value": "2022-03-01T00:00:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HH28-49MM-87QV", "record": "GHSA-HH28-49MM-87QV", "field": "published"}, {"timestamp": "2022-03-01T14:00:33Z", "date_only": false, "value": "2022-03-01T14:00:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/intelexch/9317", "record": "CVE-2022-26159", "field": "creation_timestamp", "uuid": "0c311e4c-15ab-42e1-a887-54979ba12422", "content": "https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML", "url": "https://t.me/intelexch/9317"}, {"timestamp": "2022-03-07T18:44:00Z", "date_only": false, "value": "2022-03-07T18:44Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-26159", "record": "GSD-2022-26159", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-05-19T05:00:27Z", "date_only": false, "value": "2022-05-19T05:00:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1577", "record": "CVE-2022-26159", "field": "creation_timestamp", "uuid": "838f008a-34cc-4fdd-83e7-fc354ec7c3ee", "content": "CVE-2022-26159-Ametys-Autocompletion-XML\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 python \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0431\u0440\u043e\u0441\u0430 \u0432\u0441\u0435\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Ametys CMS, \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 sqlite.\nhttps://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1577"}, {"timestamp": "2023-08-08T15:31:44Z", "date_only": false, "value": "2023-08-08T15:31:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HH28-49MM-87QV", "record": "GHSA-HH28-49MM-87QV", "field": "modified"}, {"timestamp": "2023-12-13T01:19:39.273Z", "date_only": false, "value": "2023-12-13T01:19:39.273449Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-26159", "record": "GSD-2022-26159", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T04:56:37.889Z", "date_only": false, "value": "2024-08-03T04:56:37.889Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-26159", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T04:56:37.889Z", "date_only": false, "value": "2024-08-03T04:56:37.889Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-26159", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:34:47.713Z", "date_only": false, "value": "2026-06-17T04:34:47.713", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-26159", "record": "FKIE_CVE-2022-26159", "field": "lastModified"}]}