{"metadata": {"vulnerability": "cve-2022-47945", "count": 67, "kinds": {"milestone": 4, "sighting": 38, "kev": 11, "other": 14}}, "data": [{"timestamp": "2022-12-23T00:00:00Z", "date_only": true, "value": "2022-12-23", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-47945", "record": "GSD-2022-47945", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-12-23T00:00:00Z", "date_only": false, "value": "2022-12-23T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-47945", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-12-23T00:00:00Z", "date_only": false, "value": "2022-12-23T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-47945", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-12-23T00:00:00Z", "date_only": false, "value": "2022-12-23T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-47945", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-12-23T21:15:00Z", "date_only": false, "value": "2022-12-23T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P4QR-VQ2G-22WP", "record": "GHSA-P4QR-VQ2G-22WP", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-12-23T21:15:00Z", "date_only": false, "value": "2022-12-23T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-47945", "record": "GSD-2022-47945", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-12-23T21:15:09.203Z", "date_only": false, "value": "2022-12-23T21:15:09.203", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-47945", "record": "FKIE_CVE-2022-47945", "field": "published"}, {"timestamp": "2022-12-23T21:30:17Z", "date_only": false, "value": "2022-12-23T21:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P4QR-VQ2G-22WP", "record": "GHSA-P4QR-VQ2G-22WP", "field": "published"}, {"timestamp": "2022-12-24T00:14:49Z", "date_only": false, "value": "2022-12-24T00:14:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/55268", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "11bed72e-b1e9-45f4-acf6-b184a76dec47", "content": "\u203c CVE-2022-47945 \u203c\n\nThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/55268"}, {"timestamp": "2022-12-30T22:15:00Z", "date_only": false, "value": "2022-12-30T22:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-47945", "record": "GSD-2022-47945", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": true, "value": "2023-08-08", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-47945", "record": "GSD-2022-47945", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-12-13T01:19:35.902Z", "date_only": false, "value": "2023-12-13T01:19:35.902379Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-47945", "record": "GSD-2022-47945", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-04-11T10:38:34Z", "date_only": false, "value": "2024-04-11T10:38:34+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-47945", "field": "timestamps.asserted_at", "uuid": "304bebda-28e5-430a-b094-5963c8cc1d6a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-04-11T10:38:34Z", "date_only": false, "value": "2024-04-11T10:38:34+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-47945", "field": "timestamps.first_seen_at", "uuid": "304bebda-28e5-430a-b094-5963c8cc1d6a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-03T15:02:36.570Z", "date_only": false, "value": "2024-08-03T15:02:36.570Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-47945", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "bf3581ed-c8d0-4df9-a978-fba6d0ebc3c3"}, {"timestamp": "2025-02-11T21:50:12.812Z", "date_only": false, "value": "2025-02-11T21:50:12.812182Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lhwn6qjptcn2", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "eb4d15c6-eca7-4e08-a0d2-3e86b12457bd", "url": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lhwn6qjptcn2"}, {"timestamp": "2025-02-11T22:05:45.247Z", "date_only": false, "value": "2025-02-11T22:05:45.247656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/greynoise.bsky.social/post/3lhwo5djd6k2m", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "7406c253-cc1c-49d6-b41a-b9e1dddb6fed", "url": "https://bsky.app/profile/greynoise.bsky.social/post/3lhwo5djd6k2m"}, {"timestamp": "2025-02-12T23:24:35.049Z", "date_only": false, "value": "2025-02-12T23:24:35.049371Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhzczcfwyy2n", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "090e985e-29b6-46c6-9d60-67c08f9bd57a", "url": "https://bsky.app/profile/hackingne.ws/post/3lhzczcfwyy2n"}, {"timestamp": "2025-02-13T03:45:17.003Z", "date_only": false, "value": "2025-02-13T03:45:17.003373Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhzrlee3yk2o", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "d41168ed-d0bd-487b-81d2-b2efc0a5be28", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lhzrlee3yk2o"}, {"timestamp": "2025-02-13T08:02:27Z", "date_only": false, "value": "2025-02-13T08:02:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5397", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "e88a51b2-b558-424f-868e-903be12111b4", "content": "\u200b\u26a1\ufe0f\u0421\u0442\u0430\u0440\u044b\u0435 \u0431\u0430\u0433\u0438, \u043d\u043e\u0432\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b: \u0445\u0430\u043a\u0435\u0440\u044b \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 ThinkPHP \u0438 ownCloud\n\n\ud83d\udcac \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043c\u0435\u0441\u044f\u0446\u044b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u0440\u043e\u0441\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 2022 \u0438 2023 \u0433\u043e\u0434\u043e\u0432 \u0432 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0443\u0433\u0440\u043e\u0437 GreyNoise, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-47945 \u0438 CVE-2023-49103 , \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a ThinkPHP \u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 ownCloud.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u043e\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438.\n\nCVE-2022-47945 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Local File Inclusion (LFI) \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 6.0.14. \u041e\u0448\u0438\u0431\u043a\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u044f\u0437\u044b\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u044f\u0437\u044b\u043a\u043e\u0432\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Akamai \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 , \u0430 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u0440\u0435\u0437\u043a\u043e \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0430. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e GreyNoise, \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0443\u0436\u0435 572 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0435\u0434\u0443\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 CVE-2022-47945.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2023-49103, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 ownCloud \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f PHP \u0447\u0435\u0440\u0435\u0437 URL. \u041f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0434\u043b\u044f \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0448\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a 15 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 2023 \u0433\u043e\u0434\u0430 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0424\u0411\u0420, CISA \u0438 \u0410\u041d\u0411. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0442\u0447\u0430 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u043d\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430 CVE-2023-49103 \u0442\u0430\u043a\u0436\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u0430\u0441\u044c, \u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043e\u0442\u043a\u0443\u0434\u0430 \u0432\u0435\u0434\u0443\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0438, \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e 484.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.0.14 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c GraphAPI 0.3.1 \u0434\u043b\u044f ownCloud. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0437\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5397"}, {"timestamp": "2025-02-13T10:51:51Z", "date_only": false, "value": "2025-02-13T10:51:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/2306", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "95858859-008c-44f2-938a-4db9ef0781a9", "content": "\u26a1Attackers Ramp Up Exploitation of CVE-2022-47945 and CVE-2023-49103 Vulnerabilities.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/2306"}, {"timestamp": "2025-02-13T13:38:29.984Z", "date_only": false, "value": "2025-02-13T13:38:29.984587Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113996851420528053", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "606a54e0-7ffe-4a13-b6db-8aa4c4c4e876", "url": "https://infosec.exchange/users/jbhall56/statuses/113996851420528053"}, {"timestamp": "2025-02-13T13:38:40.885Z", "date_only": false, "value": "2025-02-13T13:38:40.885210Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3li2sqj5po22z", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "933a2699-0412-4ecb-89ea-6c8dd8095aff", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3li2sqj5po22z"}, {"timestamp": "2025-02-13T15:40:26.456Z", "date_only": false, "value": "2025-02-13T15:40:26.456410Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3li2zkay4kq2m", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "7a2521a3-ca53-4963-8550-5a7536155921", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3li2zkay4kq2m"}, {"timestamp": "2025-02-13T20:30:49.184Z", "date_only": false, "value": "2025-02-13T20:30:49.184072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3li3jripkmd2v", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "f708cd07-07d3-4016-9769-f0064f646d1b", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3li3jripkmd2v"}, {"timestamp": "2025-04-11T05:27:59Z", "date_only": false, "value": "2025-04-11T05:27:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/5762", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "14fc118a-7e7c-407e-9ea1-aeece04110cf", "content": "\u200b\u26a1\ufe0f\u0421\u0442\u0430\u0440\u044b\u0439 CVE, \u043d\u043e\u0432\u044b\u0439 \u0437\u0430\u0445\u043e\u0434. 69 000 \u0430\u0442\u0430\u043a \u2014 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435\n\n\ud83d\udcac \u041c\u0430\u0440\u0442 2025 \u0433\u043e\u0434\u0430 \u043e\u0437\u043d\u0430\u043c\u0435\u043d\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u0441\u043f\u044b\u0448\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0430\u0437\u0443 \u0432 \u0434\u0432\u0443\u0445 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u2014 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438 \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 AWS \u0447\u0435\u0440\u0435\u0437 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 SSRF (Server-Side Request Forgery). \u0410\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u043a\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0446\u0435\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u043a\u0430\u043a\u0438\u0435 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b.\n\n\u0410\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u043c \u043b\u0438\u0434\u0435\u0440\u043e\u043c \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u043d\u043e\u0432\u0430 \u0441\u0442\u0430\u043b\u0430 CVE-2017-9841 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u2014 \u0441\u0442\u0430\u0440\u0430\u044f, \u043d\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PHPUnit, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430 \u043c\u0430\u0440\u0442 \u0431\u044b\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043f\u043e\u0447\u0442\u0438 70 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u041f\u0440\u0438\u0447\u0451\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u043e\u0448\u0438\u0431\u043a\u0435 \u0440\u0435\u0437\u043a\u043e \u0432\u043e\u0437\u0440\u043e\u0441 \u0435\u0449\u0451 \u0432 \u043c\u0430\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u043b\u043d\u0430\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u0443\u044e \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0441\u0451 \u0435\u0449\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f PHPUnit.\n\n\u0412\u0442\u043e\u0440\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2023-1389 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438 TP-Link Archer AX21. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0414\u0430\u0436\u0435 \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u2014 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u0440\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435.\n\n\u0422\u0440\u0435\u0442\u044c\u044e \u0441\u0442\u0440\u043e\u0447\u043a\u0443 \u0437\u0430\u043d\u044f\u043b\u0430 CVE-2024-4577 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u2014 \u0441\u0432\u0435\u0436\u0430\u044f \u0438 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PHP-CGI \u043d\u0430 Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0431\u0430\u0433 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442, \u0431\u043e\u0442\u043d\u0435\u0442\u044b \u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0435 \u0442\u0440\u043e\u044f\u043d\u044b. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c PHP, \u043d\u043e \u0438 \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CGI-\u0440\u0435\u0436\u0438\u043c\u0430 \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 \u0431\u043e\u043b\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e PHP-FPM.\n\n\u041d\u0435 \u0442\u0435\u0440\u044f\u0435\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u0438 CVE-2019-9082 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8), \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ThinkPHP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u043e\u0437\u0440\u0430\u0441\u0442, \u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u0449\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443: \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u043b\u0435\u0442\u043d\u0435\u0439 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u043c\u0430\u0440\u0442\u0435 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b Amazon. \u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u043d\u0435\u0439 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 EC2 Instance Metadata \u0447\u0435\u0440\u0435\u0437 SSRF. \u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043a\u0440\u0430\u0442\u043a\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u043c\u0438, \u043d\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u0441\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c GET-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0430\u0434\u0440\u0435\u0441\u0430\u043c \u0432\u0440\u043e\u0434\u0435 /?url= http://169.254.169.254/latest/meta-data/ , \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0445 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 (target, file, uri \u0438 \u0434\u0440.). \u0426\u0435\u043b\u044c \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c EC2, \u0432\u043a\u043b\u044e\u0447\u0430\u044f IAM-\u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e. \u0412\u0441\u0435 \u0430\u0442\u0430\u043a\u0438 \u0448\u043b\u0438 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043e\u0434\u043d\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043d\u043e\u043c\u0435\u0440\u0430, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0433\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0435\u0434\u0438\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, AWS \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u0441 IMDSv1 \u043d\u0430 IMDSv2 \u2014 \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 SSRF-\u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c\u0438.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0439 \u0437\u0430 \u0433\u043e\u0434 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u044b\u0439 \u0440\u043e\u0441\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0442\u0440\u0435\u043c \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c: CVE-2019-9082 \u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0440\u0430\u0434\u0430\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, CVE-2024-4577 \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0431\u0438\u0440\u0430\u0435\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c, \u0430 CVE-2022-47945 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c\u0438: \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a WAF . \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 outbound-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0431\u043e\u0442\u043d\u0435\u0442\u0435 \u0438\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5762"}, {"timestamp": "2025-04-15T13:51:52.899Z", "date_only": false, "value": "2025-04-15T13:51:52.899991Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-47945", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-15T13:51:52.899Z", "date_only": false, "value": "2025-04-15T13:51:52.899991Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-47945", "record": "FKIE_CVE-2022-47945", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-15T13:52:17.194Z", "date_only": false, "value": "2025-04-15T13:52:17.194Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-47945", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-15T13:52:17.194Z", "date_only": false, "value": "2025-04-15T13:52:17.194Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-47945", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-15T15:51:35Z", "date_only": false, "value": "2025-04-15T15:51:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P4QR-VQ2G-22WP", "record": "GHSA-P4QR-VQ2G-22WP", "field": "modified"}, {"timestamp": "2025-04-19T18:30:09.888Z", "date_only": false, "value": "2025-04-19T18:30:09.888176Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ln6rdlsu6y26", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "795551e7-e28c-411c-af7d-35d8f35eefd1", "url": "https://bsky.app/profile/bolhasec.com/post/3ln6rdlsu6y26"}, {"timestamp": "2025-05-18T00:00:00Z", "date_only": false, "value": "2025-05-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "25724137-f392-4442-a01c-252478160495"}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-47945", "field": "timestamps.asserted_at", "uuid": "44c20f17-2ba8-4afc-9d6c-83e65b8b4259", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-47945", "field": "evidence.0.details.added_date", "uuid": "44c20f17-2ba8-4afc-9d6c-83e65b8b4259", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-21)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "fdba3063-4b7a-4e3e-8741-07f3e4088327"}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-47945", "field": "timestamps.first_seen_at", "uuid": "44c20f17-2ba8-4afc-9d6c-83e65b8b4259", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-06-21T00:00:00Z", "date_only": false, "value": "2025-06-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-47945", "field": "status.status_updated_at", "uuid": "44c20f17-2ba8-4afc-9d6c-83e65b8b4259", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-08T00:00:00Z", "date_only": false, "value": "2026-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "cee44192-1d9f-4af0-a356-80d79fde55a1"}, {"timestamp": "2026-03-09T00:00:00Z", "date_only": false, "value": "2026-03-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "8ed4d3b7-c459-48c8-99be-170197875651"}, {"timestamp": "2026-06-03T00:00:00Z", "date_only": false, "value": "2026-06-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "127ad0a6-dca4-4ca8-a590-74dc659abdb8"}, {"timestamp": "2026-06-05T00:00:00Z", "date_only": false, "value": "2026-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "a5bb9679-7772-40ee-91ab-ec90c9625c0d"}, {"timestamp": "2026-06-17T05:14:30.090Z", "date_only": false, "value": "2026-06-17T05:14:30.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-47945", "record": "FKIE_CVE-2022-47945", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:08.876Z", "date_only": false, "value": "2026-06-19T12:46:08.876118Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85cebc34-24c3-4284-ab63-c0595ae0aadc", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "e629b2ad-7337-4148-8935-14f3cd418df3", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85cebc34-24c3-4284-ab63-c0595ae0aadc"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-47945", "field": "timestamps.recorded_at", "uuid": "44c20f17-2ba8-4afc-9d6c-83e65b8b4259", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:16.145Z", "date_only": false, "value": "2026-06-23T11:12:16.145379Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/44c20f17-2ba8-4afc-9d6c-83e65b8b4259", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "efe61eb7-5f52-4daa-b7aa-3f099b00df4f", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/44c20f17-2ba8-4afc-9d6c-83e65b8b4259"}, {"timestamp": "2026-06-23T14:03:32.741Z", "date_only": false, "value": "2026-06-23T14:03:32.741802Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89c24d1e-4f2b-4d73-9ab1-a804d9cbfd02", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "da5e6b6c-53b0-4f5d-9db6-288a5066e6bb", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89c24d1e-4f2b-4d73-9ab1-a804d9cbfd02"}, {"timestamp": "2026-06-30T09:23:11.695Z", "date_only": false, "value": "2026-06-30T09:23:11.695745Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb5c8e33-013f-40c6-bed4-a654f529caa9", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "83d9db19-d060-474b-b6b4-062a8dda6721", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb5c8e33-013f-40c6-bed4-a654f529caa9"}, {"timestamp": "2026-07-01T05:54:26.875Z", "date_only": false, "value": "2026-07-01T05:54:26.875648Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/304bebda-28e5-430a-b094-5963c8cc1d6a", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "71dadd79-6b95-44ed-8105-650115ecdb93", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/304bebda-28e5-430a-b094-5963c8cc1d6a"}, {"timestamp": "2026-07-10T10:15:05.642Z", "date_only": false, "value": "2026-07-10T10:15:05.642314Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "f69f3776-f997-4dc2-8da7-e1e7573c7968"}, {"timestamp": "2026-07-11T10:15:11.044Z", "date_only": false, "value": "2026-07-11T10:15:11.044404Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "419611a1-e6af-4878-b5e0-42efbbfbc699"}, {"timestamp": "2026-07-12T10:15:05.039Z", "date_only": false, "value": "2026-07-12T10:15:05.039013Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "5e03da1a-c1f6-4f2a-8269-be0d1cf15073"}, {"timestamp": "2026-07-25T15:00:17.889Z", "date_only": false, "value": "2026-07-25T15:00:17.889588Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/426", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "a513d11e-ddbf-4072-947f-33ac0e379d0b", "url": "https://t.me/ZerodayAlert/426"}, {"timestamp": "2026-07-26T00:00:42.190Z", "date_only": false, "value": "2026-07-26T00:00:42.190443Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/426", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "abee6f7d-b3fd-4dc0-a761-f0d3413179a2", "url": "https://t.me/ZerodayAlert/426"}, {"timestamp": "2026-08-04T13:00:11.364Z", "date_only": false, "value": "2026-08-04T13:00:11.364345Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/271", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "1f83e231-c09f-49b8-b8aa-86fa0867d578", "url": "https://t.me/purp_sec/271"}, {"timestamp": "2026-08-04T13:00:22.159Z", "date_only": false, "value": "2026-08-04T13:00:22.159821Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/136", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "3335965c-e550-4ba4-86d8-0e566a9dfd9b", "url": "https://t.me/cyberok_news/136"}, {"timestamp": "2026-08-05T00:00:22.174Z", "date_only": false, "value": "2026-08-05T00:00:22.174257Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/purp_sec/271", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "b040afc9-4429-4fec-bf9f-6a397c6c3c2f", "url": "https://t.me/purp_sec/271"}, {"timestamp": "2026-08-05T00:00:37.285Z", "date_only": false, "value": "2026-08-05T00:00:37.285979Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/136", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "5bd7f046-823d-49d5-98a3-2a990205f440", "url": "https://t.me/cyberok_news/136"}, {"timestamp": "2026-08-06T00:00:48.054Z", "date_only": false, "value": "2026-08-06T00:00:48.054626Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberok_news/136", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "042bfe75-7540-4cf2-82c0-0416f26a2622", "url": "https://t.me/cyberok_news/136"}, {"timestamp": "2026-08-06T05:00:06.251Z", "date_only": false, "value": "2026-08-06T05:00:06.251460Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/426", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "255d83e0-fc64-4bde-9228-7ea361f71de1", "url": "https://t.me/ZerodayAlert/426"}, {"timestamp": "2026-08-07T00:32:28.890Z", "date_only": false, "value": "2026-08-07T00:32:28.890594Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/426", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "2b7a7841-38a0-4aea-98c6-0d8c7ace0d17", "url": "https://t.me/ZerodayAlert/426"}, {"timestamp": "2026-09-01T20:00:07.743Z", "date_only": false, "value": "2026-09-01T20:00:07.743394Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/187001", "record": "CVE-2022-47945", "field": "creation_timestamp", "uuid": "69978480-31a0-4088-853c-a193da156c80", "url": "https://t.me/hacking_Attack/187001"}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-47945", "field": "timestamps.last_seen_at", "uuid": "304bebda-28e5-430a-b094-5963c8cc1d6a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": true, "value": "2026-10-18", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-47945", "field": "evidence.0.details.observation_date", "uuid": "304bebda-28e5-430a-b094-5963c8cc1d6a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-18T00:00:00Z", "date_only": false, "value": "2026-10-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-47945", "field": "status.status_updated_at", "uuid": "304bebda-28e5-430a-b094-5963c8cc1d6a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:03:44Z", "date_only": false, "value": "2026-10-21T09:03:44+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-47945", "field": "timestamps.recorded_at", "uuid": "304bebda-28e5-430a-b094-5963c8cc1d6a", "status": {"status_reason": "confirmed", "exploited": true}}]}