{"metadata": {"vulnerability": "cve-2023-23948", "count": 28, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 17}}, "data": [{"timestamp": "2023-01-19T21:12:31.362Z", "date_only": false, "value": "2023-01-19T21:12:31.362Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-23948", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-02-13T16:30:18.434Z", "date_only": false, "value": "2023-02-13T16:30:18.434Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-23948", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-02-13T16:30:18.434Z", "date_only": false, "value": "2023-02-13T16:30:18.434Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2023-23948", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-13T17:15:00Z", "date_only": false, "value": "2023-02-13T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-23948", "record": "GSD-2023-23948", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-02-13T17:15:11.347Z", "date_only": false, "value": "2023-02-13T17:15:11.347", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-23948", "record": "FKIE_CVE-2023-23948", "field": "published"}, {"timestamp": "2023-02-13T20:30:00Z", "date_only": false, "value": "2023-02-13T20:30:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/58013", "record": "CVE-2023-23948", "field": "creation_timestamp", "uuid": "4671c34f-4249-4e3d-bb64-51dfabf50313", "content": "\u203c CVE-2023-23948 \u203c\n\nThe ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Version 2.21.1 of the ownCloud Android app is vulnerable to SQL injection in `FileContentProvider.kt`. This issue can lead to information disclosure. Two databases, `filelist` and `owncloud_database`, are affected. In version 3.0, the `filelist` database was deprecated. However, injections affecting `owncloud_database` remain relevant as of version 3.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/58013"}, {"timestamp": "2023-02-14T09:13:20Z", "date_only": false, "value": "2023-02-14T09:13:20.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/yNx8xcOMzym-uwmk69v7zW6sw7sXyn5gg1t71GI9dnHTf28", "record": "CVE-2023-23948", "field": "creation_timestamp", "uuid": "6c863463-26e4-40e1-8604-53b4920c592a"}, {"timestamp": "2023-02-17T00:09:16Z", "date_only": false, "value": "2023-02-17T00:09:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/androidMalware/1781", "record": "CVE-2023-23948", "field": "creation_timestamp", "uuid": "7d41830e-4b4c-42b1-8f10-aed2a3e0e2b7", "content": "SQL injection vulnerabilities in Owncloud Android app - CVE-2023-24804, CVE-2023-23948\nThe Owncloud Android app uses content providers to manage its data. The provider FileContentProvider has SQL injection vulnerabilities that allow malicious applications or users in the same device to obtain internal information of the app\nhttps://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/", "url": "https://t.me/androidMalware/1781"}, {"timestamp": "2023-02-17T03:23:35Z", "date_only": false, "value": "2023-02-17T03:23:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thebugbountyhunter/7056", "record": "CVE-2023-23948", "field": "creation_timestamp", "uuid": "9ed80aea-629c-45dc-a6b5-3593cf229bd8", "content": "SQL injection vulnerabilities in Owncloud Android app - CVE-2023-24804, CVE-2023-23948\nThe Owncloud Android app uses content providers to manage its data. The provider FileContentProvider has SQL injection vulnerabilities that allow malicious applications or users in the same device to obtain internal information of the app\nhttps://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/", "url": "https://t.me/thebugbountyhunter/7056"}, {"timestamp": "2023-02-21T18:54:00Z", "date_only": false, "value": "2023-02-21T18:54Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-23948", "record": "GSD-2023-23948", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-02-21T23:00:00Z", "date_only": false, "value": "2023-02-21T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0443", "record": "WID-SEC-W-2023-0443", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-02-21T23:00:00Z", "date_only": false, "value": "2023-02-21T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0443", "record": "WID-SEC-W-2023-0443", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-02-21T23:00:00Z", "date_only": false, "value": "2023-02-21T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0443", "record": "WID-SEC-W-2023-0443", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-02-26T15:28:42Z", "date_only": false, "value": "2023-02-26T15:28:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7828", "record": "CVE-2023-23948", "field": "creation_timestamp", "uuid": "5b0cd0d1-5d66-4282-b68f-0e42d833dbfc", "content": "#exploit\n1. Tips on how to write exploit scripts\nhttps://github.com/rizemon/exploit-writing-for-oswe\n\n2. Exploiting a SUID logic bug in readline\nhttps://blog.trailofbits.com/2023/02/16/suid-logic-bug-linux-readline\n\n3. CVE-2023-24804, CVE-2023-23948:\nSQL injection vulnerabilities in Owncloud Android app\nhttps://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app", "url": "https://t.me/CyberSecurityTechnologies/7828"}, {"timestamp": "2023-02-27T18:37:22Z", "date_only": false, "value": "2023-02-27T18:37:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uv1uFiDWKsOxGZBkwk8tIqSTL_hUcb07tN8YiiPHubAxEuU", "record": "CVE-2023-23948", "field": "creation_timestamp", "uuid": "1041c5db-3ea6-4f77-93ba-94d50889eeec"}, {"timestamp": "2023-03-14T23:00:00Z", "date_only": false, "value": "2023-03-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0443", "record": "WID-SEC-W-2023-0443", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-03-14T23:00:00Z", "date_only": false, "value": "2023-03-14T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0443", "record": "WID-SEC-W-2023-0443", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-03-15T00:00:00Z", "date_only": false, "value": "2023-03-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0229", "record": "CERTFR-2023-AVI-0229", "field": "last_revision_date"}, {"timestamp": "2023-03-15T00:00:00Z", "date_only": false, "value": "2023-03-15T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0229", "record": "CERTFR-2023-AVI-0229", "field": "initial_release_date"}, {"timestamp": "2023-03-15T00:00:00Z", "date_only": false, "value": "2023-03-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0229", "record": "CERTFR-2023-AVI-0229", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-13T01:20:49.427Z", "date_only": false, "value": "2023-12-13T01:20:49.427019Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-23948", "record": "GSD-2023-23948", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T10:49:07.975Z", "date_only": false, "value": "2024-08-02T10:49:07.975Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-23948", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:44:32.570Z", "date_only": false, "value": "2024-08-15T17:44:32.570+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-0443", "record": "WID-SEC-W-2023-0443", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-10T21:00:49.928Z", "date_only": false, "value": "2025-03-10T21:00:49.928861Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-23948", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-10T21:00:49.928Z", "date_only": false, "value": "2025-03-10T21:00:49.928861Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-23948", "record": "FKIE_CVE-2023-23948", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-10T21:13:02.126Z", "date_only": false, "value": "2025-03-10T21:13:02.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-23948", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-10T21:13:02.126Z", "date_only": false, "value": "2025-03-10T21:13:02.126Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-23948", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:38:21.070Z", "date_only": false, "value": "2026-06-17T05:38:21.070", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-23948", "record": "FKIE_CVE-2023-23948", "field": "lastModified"}]}