{"metadata": {"vulnerability": "cve-2022-45402", "count": 27, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 18}}, "data": [{"timestamp": "2022-11-14T00:00:00Z", "date_only": false, "value": "2022-11-14T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-45402", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-11-15T00:00:00Z", "date_only": true, "value": "2022-11-15", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-45402", "record": "GSD-2022-45402", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-11-15T00:00:00Z", "date_only": false, "value": "2022-11-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-45402", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-11-15T00:00:00Z", "date_only": false, "value": "2022-11-15T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2022-45402", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-11-15T09:15:00Z", "date_only": false, "value": "2022-11-15T09:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RG94-84XJ-7GQ3", "record": "GHSA-RG94-84XJ-7GQ3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-11-15T09:15:00Z", "date_only": false, "value": "2022-11-15T09:15:00Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2022-42984", "record": "PYSEC-2022-42984", "field": "published"}, {"timestamp": "2022-11-15T09:15:00Z", "date_only": false, "value": "2022-11-15T09:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-45402", "record": "GSD-2022-45402", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-11-15T09:15:09.447Z", "date_only": false, "value": "2022-11-15T09:15:09.447", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-45402", "record": "FKIE_CVE-2022-45402", "field": "published"}, {"timestamp": "2022-11-15T12:00:15Z", "date_only": false, "value": "2022-11-15T12:00:15Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RG94-84XJ-7GQ3", "record": "GHSA-RG94-84XJ-7GQ3", "field": "published"}, {"timestamp": "2022-11-17T00:00:00Z", "date_only": true, "value": "2022-11-17", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-45402", "record": "GSD-2022-45402", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-11-17T00:00:00Z", "date_only": true, "value": "2022-11-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-78860", "record": "CNVD-2022-78860", "field": "submitTime"}, {"timestamp": "2022-11-17T21:24:00Z", "date_only": false, "value": "2022-11-17T21:24Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-45402", "record": "GSD-2022-45402", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-11-21T00:00:00Z", "date_only": true, "value": "2022-11-21", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-78860", "record": "CNVD-2022-78860", "field": "openTime"}, {"timestamp": "2022-12-02T13:26:53Z", "date_only": false, "value": "2022-12-02T13:26:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/freelearningtech/1582", "record": "CVE-2022-45402", "field": "creation_timestamp", "uuid": "ba704e84-3ffe-4750-a8ab-47c0706d091c", "content": "FROM INTERNET\n\n1)CVE-2022-45402: Apache Airflow: Open redirect during login\nhttps://hackerone.com/reports/1782514\n\n2)Firebase Database Takeover in https://pulseradio.mtn.co.ug/\nhttps://hackerone.com/reports/1447751\n\n3)Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands\nhttps://hackerone.com/reports/1785378\n\n4)RCE via File Upload OpenBugBounty\nhttps://0xjin.medium.com/full-rce-via-file-upload-reverse-shell-openbugbounty-6c98c254519f\n\n5)P1 Bug Hunting \u2014 Remote and Local File Inclusion Vulnerabilities\nhttps://thegrayarea.tech/p1-bug-hunting-remote-and-local-file-inclusion-vulnerabilities-aacc2a018baa\n\n6)Unvalidated Redirects and Forwards\nhttps://infosecwriteups.com/unvalidated-redirects-and-forwards-4cad5eb66b64\n\n7)Unrestricted File Upload: A Common Bug With A High Potential Revenue On HackerOne! \u2014 StackZero\nhttps://infosecwriteups.com/unrestricted-file-upload-a-common-bug-with-a-high-potential-revenue-on-hackerone-stackzero-dcf71e56e48b\n\n8)Recon The Art of Gathering Information\nhttps://mukibas37.medium.com/recon-98cf42e60eff", "url": "https://t.me/freelearningtech/1582"}, {"timestamp": "2022-12-15T10:05:18Z", "date_only": false, "value": "2022-12-15T10:05:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/freelearningtech/1599", "record": "CVE-2022-45402", "field": "creation_timestamp", "uuid": "7bc468fb-4d47-4a46-8dca-9b0850ac032e", "content": "FROM INTERNET\n\n1)CVE-2022-45402: Apache Airflow: Open redirect during login\nhttps://hackerone.com/reports/1782514\n\n2)Firebase Database Takeover in https://pulseradio.mtn.co.ug/\nhttps://hackerone.com/reports/1447751\n\n3)Double evaluation in .bash_prompt of dotfiles allows a malicious repository to execute arbitrary commands\nhttps://hackerone.com/reports/1785378\n\n4)RCE via File Upload OpenBugBounty\nhttps://0xjin.medium.com/full-rce-via-file-upload-reverse-shell-openbugbounty-6c98c254519f\n\n5)P1 Bug Hunting \u2014 Remote and Local File Inclusion Vulnerabilities\nhttps://thegrayarea.tech/p1-bug-hunting-remote-and-local-file-inclusion-vulnerabilities-aacc2a018baa\n\n6)Unvalidated Redirects and Forwards\nhttps://infosecwriteups.com/unvalidated-redirects-and-forwards-4cad5eb66b64\n\n7)Unrestricted File Upload: A Common Bug With A High Potential Revenue On HackerOne! \u2014 StackZero\nhttps://infosecwriteups.com/unrestricted-file-upload-a-common-bug-with-a-high-potential-revenue-on-hackerone-stackzero-dcf71e56e48b\n\n8)Recon The Art of Gathering Information\nhttps://mukibas37.medium.com/recon-98cf42e60eff", "url": "https://t.me/freelearningtech/1599"}, {"timestamp": "2023-05-04T04:29:22.748Z", "date_only": false, "value": "2023-05-04T04:29:22.748527Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2022-42984", "record": "PYSEC-2022-42984", "field": "modified"}, {"timestamp": "2023-12-13T01:19:24.511Z", "date_only": false, "value": "2023-12-13T01:19:24.511628Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-45402", "record": "GSD-2022-45402", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T10:56:02.090Z", "date_only": false, "value": "2024-03-06T10:56:02.090Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2022-45402", "record": "BIT-AIRFLOW-2022-45402", "field": "published"}, {"timestamp": "2024-08-03T14:09:57.045Z", "date_only": false, "value": "2024-08-03T14:09:57.045Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-45402", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-30T15:54:53.010Z", "date_only": false, "value": "2025-04-30T15:54:53.010747Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-45402", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-30T15:54:53.010Z", "date_only": false, "value": "2025-04-30T15:54:53.010747Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-45402", "record": "FKIE_CVE-2022-45402", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-30T15:55:11.656Z", "date_only": false, "value": "2025-04-30T15:55:11.656Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-45402", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-30T15:55:11.656Z", "date_only": false, "value": "2025-04-30T15:55:11.656Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-45402", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-30T16:14:16Z", "date_only": false, "value": "2025-04-30T16:14:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14083", "record": "CVE-2022-45402", "field": "creation_timestamp", "uuid": "90797a1d-dfb0-48fe-9437-77fdda2e6d9b", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-45402\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.\n\ud83d\udccf Published: 2022-11-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-30T15:55:11.656Z\n\ud83d\udd17 References:\n1. https://github.com/apache/airflow/pull/27576\n2. https://lists.apache.org/thread/nf4xrkoo6c81g6fdn4vj8k9x2686o9nh\n3. http://www.openwall.com/lists/oss-security/2022/11/15/1", "url": "https://t.me/DarkWebInformer_CVEAlerts/14083"}, {"timestamp": "2025-04-30T20:25:30Z", "date_only": false, "value": "2025-04-30T20:25:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RG94-84XJ-7GQ3", "record": "GHSA-RG94-84XJ-7GQ3", "field": "modified"}, {"timestamp": "2026-06-17T05:09:59.967Z", "date_only": false, "value": "2026-06-17T05:09:59.967", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-45402", "record": "FKIE_CVE-2022-45402", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2022-45402", "record": "BIT-AIRFLOW-2022-45402", "field": "modified"}]}