{"metadata": {"vulnerability": "cve-2023-2523", "count": 33, "kinds": {"milestone": 5, "sighting": 6, "kev": 11, "other": 11}}, "data": [{"timestamp": "2023-05-04T00:00:00Z", "date_only": false, "value": "2023-05-04T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2023-2523", "field": "containers.cna.timeline.0.time", "text": "Advisory disclosed"}, {"timestamp": "2023-05-04T02:00:00Z", "date_only": false, "value": "2023-05-04T02:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2023-2523", "field": "containers.cna.timeline.2.time", "text": "VulDB entry created"}, {"timestamp": "2023-05-04T16:14:37.080Z", "date_only": false, "value": "2023-05-04T16:14:37.080Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-2523", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-04T18:00:05Z", "date_only": false, "value": "2023-05-04T18:00:05+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2023-2523", "field": "timestamps.asserted_at", "publication_copy": true, "uuid": "66ad7f6e-a604-4910-afda-f47007d7b6a2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-04T18:00:05Z", "date_only": false, "value": "2023-05-04T18:00:05.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2023-2523", "field": "evidence.0.details.added_date", "uuid": "66ad7f6e-a604-4910-afda-f47007d7b6a2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-04T18:00:05Z", "date_only": false, "value": "2023-05-04T18:00:05+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2023-2523", "field": "timestamps.first_seen_at", "publication_copy": true, "uuid": "66ad7f6e-a604-4910-afda-f47007d7b6a2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-04T18:00:05Z", "date_only": false, "value": "2023-05-04T18:00:05+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2023-2523", "field": "status.status_updated_at", "uuid": "66ad7f6e-a604-4910-afda-f47007d7b6a2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-05-04T18:00:05.694Z", "date_only": false, "value": "2023-05-04T18:00:05.694Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-2523", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-05-04T18:15:10Z", "date_only": false, "value": "2023-05-04T18:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W8G9-XRV8-VFW2", "record": "GHSA-W8G9-XRV8-VFW2", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-05-04T18:15:10.063Z", "date_only": false, "value": "2023-05-04T18:15:10.063", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2523", "record": "FKIE_CVE-2023-2523", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-04T18:15:10.063Z", "date_only": false, "value": "2023-05-04T18:15:10.063", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-2523", "record": "GSD-2023-2523", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2023-05-04T18:30:53Z", "date_only": false, "value": "2023-05-04T18:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W8G9-XRV8-VFW2", "record": "GHSA-W8G9-XRV8-VFW2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-05-04T18:30:53Z", "date_only": false, "value": "2023-05-04T18:30:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W8G9-XRV8-VFW2", "record": "GHSA-W8G9-XRV8-VFW2", "field": "modified", "linked_record": true}, {"timestamp": "2023-05-04T22:37:14Z", "date_only": false, "value": "2023-05-04T22:37:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/63311", "record": "CVE-2023-2523", "field": "creation_timestamp", "uuid": "472b26b0-4319-4739-8719-bc7588650896", "content": "\u203c CVE-2023-2523 \u203c\n\nA vulnerability was found in Weaver E-Office 9.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file App/Ajax/ajax.php?action=mobile_upload_save. The manipulation of the argument upload_quwan leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-228014 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/63311"}, {"timestamp": "2023-05-27T15:52:41Z", "date_only": false, "value": "2023-05-27T15:52:41.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / VulDB", "record": "cve-2023-2523", "field": "containers.cna.timeline.3.time", "text": "VulDB entry last update"}, {"timestamp": "2023-10-23T05:24:47.040Z", "date_only": false, "value": "2023-10-23T05:24:47.040Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2023-2523", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-13T01:20:31.786Z", "date_only": false, "value": "2023-12-13T01:20:31.786654Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-2523", "record": "GSD-2023-2523", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-04-11T01:19:51.027Z", "date_only": false, "value": "2024-04-11T01:19:51.027", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-2523", "record": "GSD-2023-2523", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-08-02T06:26:08.981Z", "date_only": false, "value": "2024-08-02T06:26:08.981Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-2523", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T06:26:08.981Z", "date_only": false, "value": "2024-08-02T06:26:08.981Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-2523", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-13T13:12:02Z", "date_only": false, "value": "2026-05-13T13:12:02+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-2523", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-05-13T13:12:02Z", "date_only": false, "value": "2026-05-13T13:12:02+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-2523", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T05:52:46.857Z", "date_only": false, "value": "2026-06-17T05:52:46.857", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2523", "record": "FKIE_CVE-2023-2523", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-23T14:06:13.324Z", "date_only": false, "value": "2026-06-23T14:06:13.324798Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5eb2f657-8274-4123-b513-396178b08747", "record": "CVE-2023-2523", "field": "creation_timestamp", "uuid": "2c92db14-30a8-4191-b2fa-1bce811bbbff", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5eb2f657-8274-4123-b513-396178b08747", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:22:45.754Z", "date_only": false, "value": "2026-06-30T09:22:45.754185Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6cc24f9-665e-42b3-8715-3eb1b0d6dc72", "record": "CVE-2023-2523", "field": "creation_timestamp", "uuid": "e3098788-ab8d-47be-a78a-cd64a807c108", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b6cc24f9-665e-42b3-8715-3eb1b0d6dc72", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T05:54:57.492Z", "date_only": false, "value": "2026-07-01T05:54:57.492443Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "record": "CVE-2023-2523", "field": "creation_timestamp", "uuid": "d32be3b4-0fdd-4863-bebb-03060bb0de46", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-03T11:25:54.580Z", "date_only": false, "value": "2026-08-03T11:25:54.580193Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "record": "CVE-2023-2523", "field": "creation_timestamp", "uuid": "1e2ace3b-f762-4499-b47c-9ab09922dcb1", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-2523", "field": "timestamps.last_seen_at", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": true, "value": "2026-11-01", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-2523", "field": "evidence.0.details.observation_date", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-01T00:00:00Z", "date_only": false, "value": "2026-11-01T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-2523", "field": "status.status_updated_at", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-03T01:00:01Z", "date_only": false, "value": "2026-11-03T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-2523", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2023-2523", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "66ad7f6e-a604-4910-afda-f47007d7b6a2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-04T13:01:03.077Z", "date_only": false, "value": "2026-11-04T13:01:03.077829Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66ad7f6e-a604-4910-afda-f47007d7b6a2", "record": "CVE-2023-2523", "field": "creation_timestamp", "uuid": "3115f939-24e6-41ec-83e1-1a9b9bc29324", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/66ad7f6e-a604-4910-afda-f47007d7b6a2", "metric_role": "exploitation", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-15T18:21:23.667Z", "anchors": {"origin": {"timestamp": "2023-05-04T18:00:05.694Z", "date_only": false, "value": "2023-05-04T18:00:05.694Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-2523", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-05-04T18:00:05.694Z", "date_only": false, "value": "2023-05-04T18:00:05.694Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-2523", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2026-05-13T13:12:02Z", "date_only": false, "value": "2026-05-13T13:12:02+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-2523", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 95454716.306, "hours": 26515.198973888888, "days": 1104.7999572453703, "min_seconds": 95454716.306, "max_seconds": 95454716.306, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-04T18:00:05.694Z", "date_only": false, "value": "2023-05-04T18:00:05.694Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-2523", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-05-13T13:12:02Z", "date_only": false, "value": "2026-05-13T13:12:02+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-2523", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 95454716.306, "hours": 26515.198973888888, "days": 1104.7999572453703, "min_seconds": 95454716.306, "max_seconds": 95454716.306, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-04T18:00:05.694Z", "date_only": false, "value": "2023-05-04T18:00:05.694Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-2523", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-05-13T13:12:02Z", "date_only": false, "value": "2026-05-13T13:12:02+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-2523", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 111543677.973669, "hours": 30984.354992685836, "days": 1291.0147913619098, "min_seconds": 111543677.973669, "max_seconds": 111543677.973669, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-04T18:00:05.694Z", "date_only": false, "value": "2023-05-04T18:00:05.694Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-2523", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T18:21:23.667Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 16088961.667669, "hours": 4469.156018796944, "days": 186.21483411653935, "min_seconds": 16088961.667669, "max_seconds": 16088961.667669, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-05-13T13:12:02Z", "date_only": false, "value": "2026-05-13T13:12:02+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-2523", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "uuid": "f1bf7728-5697-4ef0-bf87-6e46b8f2e37c", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T18:21:23.667Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}