{"metadata": {"vulnerability": "cve-2022-45185", "count": 19, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 9}}, "data": [{"timestamp": "2022-11-11T00:00:00Z", "date_only": false, "value": "2022-11-11T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-45185", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:19:24.554Z", "date_only": false, "value": "2023-12-13T01:19:24.554972Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-45185", "record": "GSD-2022-45185", "field": "gsd.osvSchema.modified"}, {"timestamp": "2025-01-07T00:00:00Z", "date_only": false, "value": "2025-01-07T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-45185", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-07T19:17:48.523Z", "date_only": false, "value": "2025-01-07T19:17:48.523Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-45185", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-07T19:20:58.633Z", "date_only": false, "value": "2025-01-07T19:20:58.633847Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113788692604867531", "record": "CVE-2022-45185", "field": "creation_timestamp", "uuid": "882575a5-bff0-4831-bb4c-27b7aa2e1820", "url": "https://infosec.exchange/users/cve/statuses/113788692604867531"}, {"timestamp": "2025-01-07T19:39:09Z", "date_only": false, "value": "2025-01-07T19:39:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/537", "record": "CVE-2022-45185", "field": "creation_timestamp", "uuid": "fd54695d-1986-4273-9ba5-2a30c1f26f2d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-45185\n\ud83d\udd39 Description: An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T19:17:48.523563\n\ud83d\udd17 References:\n1. https://docs.suitecrm.com/admin/releases/7.12.x/\n2. https://github.com/Orange-Cyberdefense/CVE-repository/\n3. https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/poc_SuiteCRM.py", "url": "https://t.me/DarkWebInformer_CVEAlerts/537"}, {"timestamp": "2025-01-07T20:15:28Z", "date_only": false, "value": "2025-01-07T20:15:28Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QJMP-RFRJ-7CV5", "record": "GHSA-QJMP-RFRJ-7CV5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-07T20:15:28.173Z", "date_only": false, "value": "2025-01-07T20:15:28.173", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-45185", "record": "FKIE_CVE-2022-45185", "field": "published"}, {"timestamp": "2025-01-07T20:15:47.230Z", "date_only": false, "value": "2025-01-07T20:15:47.230557Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6hojpqzz22", "record": "CVE-2022-45185", "field": "creation_timestamp", "uuid": "1a90f832-918b-4b9c-9004-983c066273e9", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6hojpqzz22"}, {"timestamp": "2025-01-07T20:52:58.204Z", "date_only": false, "value": "2025-01-07T20:52:58.204883Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6jqzo7nx2u", "record": "CVE-2022-45185", "field": "creation_timestamp", "uuid": "0973f8f7-482e-489a-aff1-fa49a0eff8e8", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6jqzo7nx2u"}, {"timestamp": "2025-01-07T21:30:55Z", "date_only": false, "value": "2025-01-07T21:30:55Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QJMP-RFRJ-7CV5", "record": "GHSA-QJMP-RFRJ-7CV5", "field": "published"}, {"timestamp": "2025-01-07T22:15:07Z", "date_only": false, "value": "2025-01-07T22:15:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/14606", "record": "CVE-2022-45185", "field": "creation_timestamp", "uuid": "d1c95adc-41bd-4215-b4c0-3026a072df1b", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-45185 - \"SuiteCRM File Upload Deserialization Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-45185 \nPublished : Jan. 7, 2025, 8:15 p.m. | 42\u00a0minutes ago \nDescription : An issue was discovered in SuiteCRM 7.12.7. Authenticated users can use CRM functions to upload malicious files. Then, deserialization can be used to achieve code execution. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/14606"}, {"timestamp": "2025-01-08T17:58:58.743Z", "date_only": false, "value": "2025-01-08T17:58:58.743788Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-45185", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-08T17:58:58.743Z", "date_only": false, "value": "2025-01-08T17:58:58.743788Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-45185", "record": "FKIE_CVE-2022-45185", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-08T18:00:17.215Z", "date_only": false, "value": "2025-01-08T18:00:17.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-45185", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-08T18:00:17.215Z", "date_only": false, "value": "2025-01-08T18:00:17.215Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-45185", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-08T18:30:48Z", "date_only": false, "value": "2025-01-08T18:30:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QJMP-RFRJ-7CV5", "record": "GHSA-QJMP-RFRJ-7CV5", "field": "modified"}, {"timestamp": "2025-01-08T18:48:34.104Z", "date_only": false, "value": "2025-01-08T18:48:34.104121Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113794227463522932", "record": "CVE-2022-45185", "field": "creation_timestamp", "uuid": "4dc6260f-348c-4080-a488-440785892e2e", "url": "https://mastodon.social/users/CyberSignaler/statuses/113794227463522932"}, {"timestamp": "2026-06-17T05:09:35.213Z", "date_only": false, "value": "2026-06-17T05:09:35.213", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-45185", "record": "FKIE_CVE-2022-45185", "field": "lastModified"}]}
