{"metadata": {"vulnerability": "cve-2022-3708", "count": 21, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 14}}, "data": [{"timestamp": "2022-10-26T00:00:00Z", "date_only": false, "value": "2022-10-26T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / Wordfence", "record": "cve-2022-3708", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2022-10-26T21:31:29.199Z", "date_only": false, "value": "2022-10-26T21:31:29.199Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-3708", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-10-28T18:58:21.842Z", "date_only": false, "value": "2022-10-28T18:58:21.842Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-3708", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-10-28T19:15:00Z", "date_only": false, "value": "2022-10-28T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PH82-G2MR-P678", "record": "GHSA-PH82-G2MR-P678", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-10-28T19:15:10.140Z", "date_only": false, "value": "2022-10-28T19:15:10.140", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3708", "record": "FKIE_CVE-2022-3708", "field": "published"}, {"timestamp": "2022-10-28T19:15:10.140Z", "date_only": false, "value": "2022-10-28T19:15:10.140", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2022-3708", "record": "GSD-2022-3708", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2022-10-28T22:29:42Z", "date_only": false, "value": "2022-10-28T22:29:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/52248", "record": "CVE-2022-3708", "field": "creation_timestamp", "uuid": "78229f9d-09b8-45ad-ad5d-648583bc4622", "content": "\u203c CVE-2022-3708 \u203c\n\nThe Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of URLs supplied via the 'url' parameter found via the /v1/hotlink/proxy REST API Endpoint. This made it possible for authenticated users to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/52248"}, {"timestamp": "2022-10-29T12:00:50Z", "date_only": false, "value": "2022-10-29T12:00:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PH82-G2MR-P678", "record": "GHSA-PH82-G2MR-P678", "field": "published"}, {"timestamp": "2022-10-31T00:00:00Z", "date_only": true, "value": "2022-10-31", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-74817", "record": "CNVD-2023-74817", "field": "submitTime"}, {"timestamp": "2022-11-03T19:00:27Z", "date_only": false, "value": "2022-11-03T19:00:27Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PH82-G2MR-P678", "record": "GHSA-PH82-G2MR-P678", "field": "modified"}, {"timestamp": "2023-10-08T00:00:00Z", "date_only": true, "value": "2023-10-08", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-74817", "record": "CNVD-2023-74817", "field": "openTime"}, {"timestamp": "2023-12-13T01:19:40.252Z", "date_only": false, "value": "2023-12-13T01:19:40.252311Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3708", "record": "GSD-2022-3708", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-09T03:19:05.880Z", "date_only": false, "value": "2024-01-09T03:19:05.880", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3708", "record": "GSD-2022-3708", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-08-03T01:20:57.117Z", "date_only": false, "value": "2024-08-03T01:20:57.117Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-3708", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-23T13:14:07.288Z", "date_only": false, "value": "2025-04-23T13:14:07.288549Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-3708", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-23T13:14:07.288Z", "date_only": false, "value": "2025-04-23T13:14:07.288549Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3708", "record": "FKIE_CVE-2022-3708", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-05T12:57:12.593Z", "date_only": false, "value": "2025-05-05T12:57:12.593Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-3708", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-05T13:19:13Z", "date_only": false, "value": "2025-05-05T13:19:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14851", "record": "CVE-2022-3708", "field": "creation_timestamp", "uuid": "2f4238bd-0cc7-4ac6-a9cb-11014b8b0d7e", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3708\n\ud83d\udd25 CVSS Score: 9.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of URLs supplied via the 'url' parameter found via the /v1/hotlink/proxy REST API Endpoint. This makes it possible for authenticated users to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.\n\ud83d\udccf Published: 2022-10-28T18:58:21.842Z\n\ud83d\udccf Modified: 2025-05-05T12:57:12.593Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/7817a840-325a-4709-8374-84bb32d98d0e?source=cve\n2. https://wordpress.org/plugins/web-stories\n3. https://github.com/GoogleForCreators/web-stories-wp/compare/v1.24.0...v1.25.0\n4. https://github.com/GoogleForCreators/web-stories-wp/commit/3ad2099f95155d658624ffac2e34ce0da739e34b\n5. https://www.wordfence.com/vulnerability-advisories-continued/#CVE-2022-3708", "url": "https://t.me/DarkWebInformer_CVEAlerts/14851"}, {"timestamp": "2026-04-08T17:01:48.973Z", "date_only": false, "value": "2026-04-08T17:01:48.973Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-3708", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-04-08T17:01:48.973Z", "date_only": false, "value": "2026-04-08T17:01:48.973Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "cve-2022-3708", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:00:09.333Z", "date_only": false, "value": "2026-06-17T05:00:09.333", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3708", "record": "FKIE_CVE-2022-3708", "field": "lastModified"}]}