{"metadata": {"vulnerability": "cve-2023-27638", "count": 20, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 12}}, "data": [{"timestamp": "2023-03-05T00:00:00Z", "date_only": false, "value": "2023-03-05T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-27638", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-27638", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-03-22T00:00:00Z", "date_only": false, "value": "2023-03-22T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2023-27638", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-03-22T13:15:00Z", "date_only": false, "value": "2023-03-22T13:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JM4Q-F3H3-J5CF", "record": "GHSA-JM4Q-F3H3-J5CF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-03-22T13:15:00Z", "date_only": false, "value": "2023-03-22T13:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-27638", "record": "GSD-2023-27638", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-03-22T13:15:10.213Z", "date_only": false, "value": "2023-03-22T13:15:10.213", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27638", "record": "FKIE_CVE-2023-27638", "field": "published"}, {"timestamp": "2023-03-22T15:30:20Z", "date_only": false, "value": "2023-03-22T15:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JM4Q-F3H3-J5CF", "record": "GHSA-JM4Q-F3H3-J5CF", "field": "published"}, {"timestamp": "2023-03-22T15:35:55Z", "date_only": false, "value": "2023-03-22T15:35:55.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/60443", "record": "CVE-2023-27638", "field": "creation_timestamp", "uuid": "088e9531-0c7b-44a8-abac-16b4c6623efa", "content": "\u203c CVE-2023-27638 \u203c\n\nAn issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised tshirtecommerce_design_cart_id GET parameter in order to exploit an insecure parameter in the functions hookActionCartSave and updateCustomizationTable, which could lead to a SQL injection. This is exploited in the wild in March 2023.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/60443"}, {"timestamp": "2023-06-21T15:58:00Z", "date_only": false, "value": "2023-06-21T15:58Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-27638", "record": "GSD-2023-27638", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:56.081Z", "date_only": false, "value": "2023-12-13T01:20:56.081077Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-27638", "record": "GSD-2023-27638", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T12:16:36.598Z", "date_only": false, "value": "2024-08-02T12:16:36.598Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-27638", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-26T15:39:14.838Z", "date_only": false, "value": "2025-02-26T15:39:14.838400Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-27638", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-26T15:39:14.838Z", "date_only": false, "value": "2025-02-26T15:39:14.838400Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27638", "record": "FKIE_CVE-2023-27638", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-26T15:39:18.535Z", "date_only": false, "value": "2025-02-26T15:39:18.535Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-27638", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-26T15:39:18.535Z", "date_only": false, "value": "2025-02-26T15:39:18.535Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-27638", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-26T18:30:37Z", "date_only": false, "value": "2025-02-26T18:30:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JM4Q-F3H3-J5CF", "record": "GHSA-JM4Q-F3H3-J5CF", "field": "modified"}, {"timestamp": "2025-05-29T13:34:47Z", "date_only": false, "value": "2025-05-29T13:34:47.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-27638.yaml", "record": "CVE-2023-27638", "field": "creation_timestamp", "uuid": "7943ac04-2a35-4a25-987b-5ddfccc4891e", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2023/CVE-2023-27638.yaml"}, {"timestamp": "2025-05-31T21:02:20.943Z", "date_only": false, "value": "2025-05-31T21:02:20.943512Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingc5q2g2u", "record": "CVE-2023-27638", "field": "creation_timestamp", "uuid": "7f9123f6-1e36-45ce-9c59-5cc5e7c93cd3", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqingc5q2g2u"}, {"timestamp": "2026-06-17T05:45:38.713Z", "date_only": false, "value": "2026-06-17T05:45:38.713", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-27638", "record": "FKIE_CVE-2023-27638", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:58.003Z", "date_only": false, "value": "2026-06-19T12:46:58.003211Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bc8dd1bc-147b-499b-a7cf-277d428fe5f1", "record": "CVE-2023-27638", "field": "creation_timestamp", "uuid": "47f1286c-0e25-401b-b643-7dfb3d02dec7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bc8dd1bc-147b-499b-a7cf-277d428fe5f1"}]}
