{"metadata": {"vulnerability": "cve-2022-37346", "count": 19, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 14}}, "data": [{"timestamp": "2022-09-09T00:00:00Z", "date_only": false, "value": "2022-09-09T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-37346", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-09-27T01:55:15Z", "date_only": false, "value": "2022-09-27T01:55:15.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-37346", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-09-27T01:55:15Z", "date_only": false, "value": "2022-09-27T01:55:15.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / jpcert", "record": "cve-2022-37346", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-09-27T23:15:00Z", "date_only": false, "value": "2022-09-27T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2MFJ-W9XR-GFF7", "record": "GHSA-2MFJ-W9XR-GFF7", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-09-27T23:15:00Z", "date_only": false, "value": "2022-09-27T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-37346", "record": "GSD-2022-37346", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-09-27T23:15:14.540Z", "date_only": false, "value": "2022-09-27T23:15:14.540", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-37346", "record": "FKIE_CVE-2022-37346", "field": "published"}, {"timestamp": "2022-09-28T00:00:17Z", "date_only": false, "value": "2022-09-28T00:00:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2MFJ-W9XR-GFF7", "record": "GHSA-2MFJ-W9XR-GFF7", "field": "published"}, {"timestamp": "2022-09-28T02:36:16Z", "date_only": false, "value": "2022-09-28T02:36:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/50535", "record": "CVE-2022-37346", "field": "creation_timestamp", "uuid": "bdbd04c8-e7e2-4bb6-89d5-3d049a21e879", "content": "\u203c CVE-2022-37346 \u203c\n\nEC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files. Exploiting this vulnerability allows a remote unauthenticated attacker to upload arbitrary files other than image files. If a user with an administrative privilege of EC-CUBE where the vulnerable plugin is installed is led to upload a specially crafted file, an arbitrary script may be executed on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/50535"}, {"timestamp": "2022-09-30T19:25:00Z", "date_only": false, "value": "2022-09-30T19:25Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-37346", "record": "GSD-2022-37346", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-10-01T00:00:18Z", "date_only": false, "value": "2022-10-01T00:00:18Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2MFJ-W9XR-GFF7", "record": "GHSA-2MFJ-W9XR-GFF7", "field": "modified"}, {"timestamp": "2023-12-13T01:19:13.640Z", "date_only": false, "value": "2023-12-13T01:19:13.640434Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-37346", "record": "GSD-2022-37346", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-13T02:03:00Z", "date_only": false, "value": "2024-06-13T11:03+09:00", "kind": "other", "label": "Dc:date", "source": "jvndb \u00b7 JVNDB-2022-000072", "record": "JVNDB-2022-000072", "field": "dc:date"}, {"timestamp": "2024-06-13T02:03:00Z", "date_only": false, "value": "2024-06-13T11:03+09:00", "kind": "other", "label": "Dcterms:modified", "source": "jvndb \u00b7 JVNDB-2022-000072", "record": "JVNDB-2022-000072", "field": "dcterms:modified"}, {"timestamp": "2024-08-03T10:29:20.770Z", "date_only": false, "value": "2024-08-03T10:29:20.770Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-37346", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-21T18:25:11.707Z", "date_only": false, "value": "2025-05-21T18:25:11.707305Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-37346", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-21T18:25:11.707Z", "date_only": false, "value": "2025-05-21T18:25:11.707305Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-37346", "record": "FKIE_CVE-2022-37346", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-21T18:25:42.293Z", "date_only": false, "value": "2025-05-21T18:25:42.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-37346", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-21T18:25:42.293Z", "date_only": false, "value": "2025-05-21T18:25:42.293Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-37346", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:54:55.667Z", "date_only": false, "value": "2026-06-17T04:54:55.667", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-37346", "record": "FKIE_CVE-2022-37346", "field": "lastModified"}]}