{"metadata": {"vulnerability": "cve-2023-22894", "count": 46, "kinds": {"milestone": 4, "sighting": 14, "kev": 11, "other": 17}}, "data": [{"timestamp": "2023-01-10T00:00:00Z", "date_only": false, "value": "2023-01-10T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-22894", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-04-18T09:12:23Z", "date_only": false, "value": "2023-04-18T09:12:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/170", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "f495bc73-ed2b-469a-bf4a-8548f64f96d7", "content": "Multiple Critical Vulnerabilities in Strapi Versions <=4.7.1\n\n\ud83d\udc64 by GhostCcamm\n\nStrapi had multiple critical vulnerabilities that could be chained together to gain Unauthenticated Remote Code Execution. This is GhostCcamm's public disclosure of the vulnerabilities he found in Strapi, how they were patched and some nonsensical ramblings.\n\n\ud83d\udcdd Contents:\n\u25cf Overview \n\u25cf TL;DR\n\u25cf Disclaimers\n\u25cf CVE-2023-22893\n\u25cf CVE-2023-22621\n\u25cf CVE-2023-22894\n\u25cf Chaining CVE-2023-22621 and CVE-2023-22894 Together to Achieve Unauthenticated RCE \n\u25cf Indicators of Compromise \n\u25cf Conclusion \n\nhttps://www.ghostccamm.com/blog/multi_strapi_vulns/", "url": "https://t.me/ptswarm/170"}, {"timestamp": "2023-04-18T17:16:58Z", "date_only": false, "value": "2023-04-18T17:16:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BDIuQxJm2Cl1hcH3rBtjVuiBaQPlmqaGA0Zegr2NgVBdQWM", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "e02f4128-905b-4f26-a630-b5cd46964534"}, {"timestamp": "2023-04-19T00:00:00Z", "date_only": true, "value": "2023-04-19", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-22894", "record": "GSD-2023-22894", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-04-19T00:00:00Z", "date_only": false, "value": "2023-04-19T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-22894", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-04-19T00:00:00Z", "date_only": false, "value": "2023-04-19T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2023-22894", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-19T16:15:00Z", "date_only": false, "value": "2023-04-19T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-22894", "record": "GSD-2023-22894", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-04-19T16:15:07Z", "date_only": false, "value": "2023-04-19T16:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JJQF-J4W7-92W8", "record": "GHSA-JJQF-J4W7-92W8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-04-19T16:15:07.303Z", "date_only": false, "value": "2023-04-19T16:15:07.303", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-22894", "record": "FKIE_CVE-2023-22894", "field": "published"}, {"timestamp": "2023-04-19T21:41:26Z", "date_only": false, "value": "2023-04-19T21:41:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JJQF-J4W7-92W8", "record": "GHSA-JJQF-J4W7-92W8", "field": "published"}, {"timestamp": "2023-04-19T21:41:26Z", "date_only": false, "value": "2023-04-19T21:41:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JJQF-J4W7-92W8", "record": "GHSA-JJQF-J4W7-92W8", "field": "modified"}, {"timestamp": "2023-04-20T00:00:00Z", "date_only": true, "value": "2023-04-20", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-22894", "record": "GSD-2023-22894", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-05-01T00:00:00Z", "date_only": true, "value": "2023-05-01", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-22894", "record": "GSD-2023-22894", "field": "namespaces.gitlab.com.advisories.1.date"}, {"timestamp": "2023-05-01T18:10:00Z", "date_only": false, "value": "2023-05-01T18:10Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-22894", "record": "GSD-2023-22894", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:43.315Z", "date_only": false, "value": "2023-12-13T01:20:43.315209Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-22894", "record": "GSD-2023-22894", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T10:20:31.183Z", "date_only": false, "value": "2024-08-02T10:20:31.183Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-22894", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T02:44:19Z", "date_only": false, "value": "2025-02-06T02:44:19.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/pD-oLW4y0XW4yFER1BFQ6URql9YMKhYuONoBuEocaLRzSF5v", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "8fc136ba-2ee2-4e37-b895-bc75e4ffe6ca"}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-22894", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-06T00:00:00Z", "date_only": false, "value": "2026-10-06T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-22894", "record": "FKIE_CVE-2023-22894", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-22894", "field": "timestamps.asserted_at", "uuid": "44481a5a-a216-4ed2-8066-979f53baddce", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-22894", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": true, "value": "2026-10-08", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-22894", "field": "evidence.0.details.date_added", "uuid": "44481a5a-a216-4ed2-8066-979f53baddce", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-22894", "field": "timestamps.first_seen_at", "uuid": "44481a5a-a216-4ed2-8066-979f53baddce", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-22894", "field": "status.status_updated_at", "uuid": "44481a5a-a216-4ed2-8066-979f53baddce", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T00:00:00Z", "date_only": false, "value": "2026-10-08T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-22894", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2026-10-08T17:40:53Z", "date_only": false, "value": "2026-10-08T17:40:53+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2023-22894", "field": "timestamps.asserted_at", "uuid": "1a36dd73-f59a-4e95-80e7-5e6e7c2150c5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T17:40:53Z", "date_only": false, "value": "2026-10-08T17:40:53+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2023-22894", "field": "timestamps.first_seen_at", "uuid": "1a36dd73-f59a-4e95-80e7-5e6e7c2150c5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T17:40:53Z", "date_only": false, "value": "2026-10-08T17:40:53+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2023-22894", "field": "status.status_updated_at", "uuid": "1a36dd73-f59a-4e95-80e7-5e6e7c2150c5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T17:40:53.828Z", "date_only": false, "value": "2026-10-08T17:40:53.828Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2023-22894", "field": "evidence.0.details.added_date", "uuid": "1a36dd73-f59a-4e95-80e7-5e6e7c2150c5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T18:00:01Z", "date_only": false, "value": "2026-10-08T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-22894", "field": "timestamps.recorded_at", "uuid": "44481a5a-a216-4ed2-8066-979f53baddce", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-08T18:00:02.553Z", "date_only": false, "value": "2026-10-08T18:00:02.553540Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/44481a5a-a216-4ed2-8066-979f53baddce", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "05ac9641-e8e5-4246-9d51-d9561888fe38", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/44481a5a-a216-4ed2-8066-979f53baddce"}, {"timestamp": "2026-10-08T18:00:31.213Z", "date_only": false, "value": "2026-10-08T18:00:31.213625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxf22y4pwj23", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "9def3a3c-8261-4795-8473-3121036e30b3", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxf22y4pwj23"}, {"timestamp": "2026-10-08T18:20:04.648Z", "date_only": false, "value": "2026-10-08T18:20:04.648694Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxf35wn26v2l", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "dbef960d-ae64-4f96-9011-c7480a8d65c0", "url": "https://bsky.app/profile/aipostdaily.bsky.social/post/3mxf35wn26v2l"}, {"timestamp": "2026-10-08T19:15:44.735Z", "date_only": false, "value": "2026-10-08T19:15:44.735122Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxf6bisoj32x", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "b1f2e071-4cf3-4db4-8ac8-6293dd15fb15", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxf6bisoj32x"}, {"timestamp": "2026-10-08T20:05:51.155Z", "date_only": false, "value": "2026-10-08T20:05:51.155466Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/secdb/statuses/117406827249675241", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "188a66bb-f1e3-4b61-9afa-823392bdded3", "url": "https://infosec.exchange/users/secdb/statuses/117406827249675241"}, {"timestamp": "2026-10-09T03:55:26.444Z", "date_only": false, "value": "2026-10-09T03:55:26.444Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-22894", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-09T03:55:26.444Z", "date_only": false, "value": "2026-10-09T03:55:26.444Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-22894", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-09T06:16:11Z", "date_only": false, "value": "2026-10-09T06:16:11+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2023-22894", "field": "timestamps.recorded_at", "uuid": "1a36dd73-f59a-4e95-80e7-5e6e7c2150c5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-09T06:16:56.555Z", "date_only": false, "value": "2026-10-09T06:16:56.555980Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1a36dd73-f59a-4e95-80e7-5e6e7c2150c5", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "d1690159-74f3-44f5-aa21-56fe2c4bbd4a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/1a36dd73-f59a-4e95-80e7-5e6e7c2150c5"}, {"timestamp": "2026-10-09T06:31:13Z", "date_only": false, "value": "2026-10-09T06:31:13.000812Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mxgdzdlyqa2u", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "0ddc7c46-5ed3-490e-a0b1-dc216c11ea4e", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mxgdzdlyqa2u"}, {"timestamp": "2026-10-09T07:29:18.144Z", "date_only": false, "value": "2026-10-09T07:29:18.144985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mxghb6xttr2g", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "9dd4a06c-4f9c-4227-b1f5-1667f251c962", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mxghb6xttr2g"}, {"timestamp": "2026-10-09T09:06:52.324Z", "date_only": false, "value": "2026-10-09T09:06:52.324197Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mxgmpnxesf27", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "13d4533d-a1d8-475c-ba42-7be745a1b439", "url": "https://bsky.app/profile/csirts.com/post/3mxgmpnxesf27"}, {"timestamp": "2026-10-09T14:20:41.113Z", "date_only": false, "value": "2026-10-09T14:20:41.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-22894", "record": "FKIE_CVE-2023-22894", "field": "lastModified"}, {"timestamp": "2026-10-11T00:00:00Z", "date_only": true, "value": "2026-10-11", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-22894", "field": "evidence.0.details.due_date", "uuid": "44481a5a-a216-4ed2-8066-979f53baddce", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-12T12:35:19.848Z", "date_only": false, "value": "2026-10-12T12:35:19.848287Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/160355e6-36c4-42a6-a839-70a2c2c3a87e", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "f25ebc58-daec-40cc-b61d-5a547ffb0425", "url": "https://vulnerability.circl.lu/bundle/160355e6-36c4-42a6-a839-70a2c2c3a87e"}, {"timestamp": "2026-10-12T14:11:16.281Z", "date_only": false, "value": "2026-10-12T14:11:16.281046Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxop4pfvfejq", "record": "CVE-2023-22894", "field": "creation_timestamp", "uuid": "eab99d0e-a1be-470b-8c44-9c9e3d940c29", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxop4pfvfejq"}]}