{"metadata": {"vulnerability": "cve-2023-37941", "count": 31, "kinds": {"milestone": 6, "sighting": 9, "kev": 0, "other": 16}}, "data": [{"timestamp": "2023-07-11T09:41:42.046Z", "date_only": false, "value": "2023-07-11T09:41:42.046Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-37941", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-06T13:06:20.879Z", "date_only": false, "value": "2023-09-06T13:06:20.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-37941", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-09-06T14:15:00Z", "date_only": false, "value": "2023-09-06T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-37941", "record": "GSD-2023-37941", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-09-06T14:15:10Z", "date_only": false, "value": "2023-09-06T14:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FJ4X-M62J-WVWG", "record": "GHSA-FJ4X-M62J-WVWG", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-09-06T14:15:10.483Z", "date_only": false, "value": "2023-09-06T14:15:10.483", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-37941", "record": "FKIE_CVE-2023-37941", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-06T15:30:27Z", "date_only": false, "value": "2023-09-06T15:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FJ4X-M62J-WVWG", "record": "GHSA-FJ4X-M62J-WVWG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-09-07T11:01:26Z", "date_only": false, "value": "2023-09-07T11:01:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8984", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "6f1eb9ce-53b7-448e-ac3a-17d16bae4a7f", "content": "#exploit\n1. CVE-2023-4634:\nRCE Exploit for Wordpress Media-Library Plugin < 3.10\nhttps://github.com/Patrowl/CVE-2023-4634\n\n2. CVE-2023-27524, CVE-2023-39265, CVE-2023-37941:\nApache Superset\u00a0- RCE, Credential Harvesting & More\nhttps://www.horizon3.ai/apache-superset-part-ii-rce-credential-harvesting-and-more", "url": "https://t.me/CyberSecurityTechnologies/8984", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-07T13:31:34Z", "date_only": false, "value": "2023-09-07T13:31:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3838", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "18739b74-e652-4b68-9144-d8e912a2bc58", "content": "Apache SuperSet users, beware! \n \nA critical update has been released to patch two new vulnerabilities (CVE-2023-39265 & CVE-2023-37941) that could expose your servers to remote code execution attacks. \n \nFind out here: https://thehackernews.com/2023/09/alert-apache-superset-vulnerabilities.html", "url": "https://t.me/thehackernews/3838"}, {"timestamp": "2023-09-07T13:42:21Z", "date_only": false, "value": "2023-09-07T13:42:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hqzcq-N-UmfLuy_GrV60Wdv72OSiDR6dOzg10bG3ca7Czg", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "1dc149b6-d03f-416e-b00b-ee97c5dc6cd0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-09-07T13:47:33Z", "date_only": false, "value": "2023-09-07T13:47:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/755", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "c169fe3b-a5ae-4b3c-be7a-cdbfcfc4da41", "content": "Alert: Apache SuperSet Vulnerabilities Expose Servers to Remote Code Execution Attacks\nhttps://thehackernews.com/2023/09/alert-apache-superset-vulnerabilities.html\n\nPatches have been released to address two new security vulnerabilities in Apache SuperSet that could be exploited by an attacker to gain remote code execution on affected systems.\nThe update (version 2.1.1) plugs\u00a0CVE-2023-39265\u00a0and\u00a0CVE-2023-37941, which make it possible to conduct nefarious actions once a bad actor is able to gain control of Superset\u2019s metadata database.\nOutside of these", "url": "https://t.me/KomunitiSiber/755"}, {"timestamp": "2023-09-11T00:00:00Z", "date_only": true, "value": "2023-09-11", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-06817", "record": "CNVD-2024-06817", "field": "submitTime", "linked_record": true}, {"timestamp": "2023-10-12T21:34:40Z", "date_only": false, "value": "2023-10-12T21:34:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "2c2e98e2-46de-442a-980d-fdf812208549", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb"}, {"timestamp": "2023-10-13T15:06:32.657Z", "date_only": false, "value": "2023-10-13T15:06:32.657Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2023-37941", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-13T16:15:00Z", "date_only": false, "value": "2023-10-13T16:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-37941", "record": "GSD-2023-37941", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-12-13T01:20:24.761Z", "date_only": false, "value": "2023-12-13T01:20:24.761493Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-37941", "record": "GSD-2023-37941", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-02-01T00:00:00Z", "date_only": true, "value": "2024-02-01", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-06817", "record": "CNVD-2024-06817", "field": "openTime", "linked_record": true}, {"timestamp": "2024-08-02T17:23:27.796Z", "date_only": false, "value": "2024-08-02T17:23:27.796Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-37941", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-27T18:55:32.093Z", "date_only": false, "value": "2024-09-27T18:55:32.093667Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-37941", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-27T18:55:32.093Z", "date_only": false, "value": "2024-09-27T18:55:32.093667Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-37941", "record": "FKIE_CVE-2023-37941", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-09-27T18:56:40.047Z", "date_only": false, "value": "2024-09-27T18:56:40.047Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-37941", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-05T07:27:54.294Z", "date_only": false, "value": "2025-02-05T07:27:54.294Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-SUPERSET-2023-37941", "record": "BIT-SUPERSET-2023-37941", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-06T03:13:46Z", "date_only": false, "value": "2025-02-06T03:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "c9497245-de45-4ea8-afa5-c89988bdffe8"}, {"timestamp": "2025-02-13T17:01:41.199Z", "date_only": false, "value": "2025-02-13T17:01:41.199Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-37941", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-13T19:11:41Z", "date_only": false, "value": "2025-02-13T19:11:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FJ4X-M62J-WVWG", "record": "GHSA-FJ4X-M62J-WVWG", "field": "modified", "linked_record": true}, {"timestamp": "2025-02-23T04:10:55Z", "date_only": false, "value": "2025-02-23T04:10:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "5ae84d6f-5b18-4224-833e-ef0578d8b46c"}, {"timestamp": "2025-08-16T21:02:22.128Z", "date_only": false, "value": "2025-08-16T21:02:22.128502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwkbd7jwdi2v", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "7beff782-361e-4ef3-9210-bd2f1ced140f", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwkbd7jwdi2v"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "fd089b48-39c9-4c68-ab65-a8d6451b8cad"}, {"timestamp": "2026-06-17T06:08:57.140Z", "date_only": false, "value": "2026-06-17T06:08:57.140", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-37941", "record": "FKIE_CVE-2023-37941", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-07T11:45:23.531Z", "date_only": false, "value": "2026-07-07T11:45:23.531870Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-1175", "record": "PYSEC-2026-1175", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-07-07T17:23:45.104Z", "date_only": false, "value": "2026-07-07T17:23:45.104576Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-1175", "record": "PYSEC-2026-1175", "field": "modified", "linked_record": true}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-SUPERSET-2023-37941", "record": "BIT-SUPERSET-2023-37941", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T23:18:10.485Z", "anchors": {"origin": {"timestamp": "2023-09-06T13:06:20.879Z", "date_only": false, "value": "2023-09-06T13:06:20.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-37941", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-09-06T13:06:20.879Z", "date_only": false, "value": "2023-09-06T13:06:20.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-37941", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-09-07T11:01:26Z", "date_only": false, "value": "2023-09-07T11:01:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8984", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "6f1eb9ce-53b7-448e-ac3a-17d16bae4a7f", "content": "#exploit\n1. CVE-2023-4634:\nRCE Exploit for Wordpress Media-Library Plugin < 3.10\nhttps://github.com/Patrowl/CVE-2023-4634\n\n2. CVE-2023-27524, CVE-2023-39265, CVE-2023-37941:\nApache Superset\u00a0- RCE, Credential Harvesting & More\nhttps://www.horizon3.ai/apache-superset-part-ii-rce-credential-harvesting-and-more", "url": "https://t.me/CyberSecurityTechnologies/8984", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 78905.121, "hours": 21.918089166666668, "days": 0.9132537152777778, "min_seconds": 78905.121, "max_seconds": 78905.121, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-06T13:06:20.879Z", "date_only": false, "value": "2023-09-06T13:06:20.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-37941", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-09-07T11:01:26Z", "date_only": false, "value": "2023-09-07T11:01:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8984", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "6f1eb9ce-53b7-448e-ac3a-17d16bae4a7f", "content": "#exploit\n1. CVE-2023-4634:\nRCE Exploit for Wordpress Media-Library Plugin < 3.10\nhttps://github.com/Patrowl/CVE-2023-4634\n\n2. CVE-2023-27524, CVE-2023-39265, CVE-2023-37941:\nApache Superset\u00a0- RCE, Credential Harvesting & More\nhttps://www.horizon3.ai/apache-superset-part-ii-rce-credential-harvesting-and-more", "url": "https://t.me/CyberSecurityTechnologies/8984", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 100174309.606439, "hours": 27826.19711289972, "days": 1159.424879704155, "min_seconds": 100174309.606439, "max_seconds": 100174309.606439, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-06T13:06:20.879Z", "date_only": false, "value": "2023-09-06T13:06:20.879Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-37941", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T23:18:10.485Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 100095404.485439, "hours": 27804.279023733056, "days": 1158.5116259888773, "min_seconds": 100095404.485439, "max_seconds": 100095404.485439, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-09-07T11:01:26Z", "date_only": false, "value": "2023-09-07T11:01:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8984", "record": "CVE-2023-37941", "field": "creation_timestamp", "uuid": "6f1eb9ce-53b7-448e-ac3a-17d16bae4a7f", "content": "#exploit\n1. CVE-2023-4634:\nRCE Exploit for Wordpress Media-Library Plugin < 3.10\nhttps://github.com/Patrowl/CVE-2023-4634\n\n2. CVE-2023-27524, CVE-2023-39265, CVE-2023-37941:\nApache Superset\u00a0- RCE, Credential Harvesting & More\nhttps://www.horizon3.ai/apache-superset-part-ii-rce-credential-harvesting-and-more", "url": "https://t.me/CyberSecurityTechnologies/8984", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T23:18:10.485Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}