{"metadata": {"vulnerability": "cve-2023-40037", "count": 28, "kinds": {"milestone": 6, "sighting": 4, "kev": 0, "other": 18}}, "data": [{"timestamp": "2023-08-06T03:00:00Z", "date_only": false, "value": "2023-08-06T03:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / apache", "record": "cve-2023-40037", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2023-08-08T16:31:31.220Z", "date_only": false, "value": "2023-08-08T16:31:31.220Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-40037", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-18T21:54:52.454Z", "date_only": false, "value": "2023-08-18T21:54:52.454Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-40037", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-08-18T21:55:05.814Z", "date_only": false, "value": "2023-08-18T21:55:05.814Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2023-40037", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-08-18T22:15:00Z", "date_only": false, "value": "2023-08-18T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-40037", "record": "GSD-2023-40037", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-08-18T22:15:10Z", "date_only": false, "value": "2023-08-18T22:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-23QF-3JF9-H3Q9", "record": "GHSA-23QF-3JF9-H3Q9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-08-18T22:15:10.690Z", "date_only": false, "value": "2023-08-18T22:15:10.690", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40037", "record": "FKIE_CVE-2023-40037", "field": "published"}, {"timestamp": "2023-08-19T00:30:29Z", "date_only": false, "value": "2023-08-19T00:30:29Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-23QF-3JF9-H3Q9", "record": "GHSA-23QF-3JF9-H3Q9", "field": "published"}, {"timestamp": "2023-08-19T02:38:35Z", "date_only": false, "value": "2023-08-19T02:38:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/68850", "record": "CVE-2023-40037", "field": "creation_timestamp", "uuid": "b6ccf2ba-3753-4855-9352-74a24246c3bc", "content": "\u203c CVE-2023-40037 \u203c\n\nApache NiFi 1.21.0 through 1.23.0 support JDBC and JNDI JMS access in several Processors and Controller Services with connection URL validation that does not provide sufficient protection against crafted inputs. An authenticated and authorized user can bypass connection URL validation using custom input formatting. The resolution enhances connection URL validation and introduces validation for additional related properties. Upgrading to Apache NiFi 1.23.1 is the recommended mitigation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/68850"}, {"timestamp": "2023-08-20T22:00:00Z", "date_only": false, "value": "2023-08-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2100", "record": "WID-SEC-W-2023-2100", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-20T22:00:00Z", "date_only": false, "value": "2023-08-20T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2100", "record": "WID-SEC-W-2023-2100", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-20T22:00:00Z", "date_only": false, "value": "2023-08-20T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2100", "record": "WID-SEC-W-2023-2100", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-20T22:00:00Z", "date_only": false, "value": "2023-08-20T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2100", "record": "WID-SEC-W-2023-2100", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-08-23T16:59:00Z", "date_only": false, "value": "2023-08-23T16:59Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-40037", "record": "GSD-2023-40037", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-23T22:57:00Z", "date_only": false, "value": "2023-11-23T22:57:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/5931", "record": "CVE-2023-40037", "field": "creation_timestamp", "uuid": "6ee68aa8-d49f-4b0d-a870-aa85d48ac178", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-40037: Incomplete Validation of JDBC and JNDI Connection URLs in Apache NiFi\nURL\uff1ahttps://github.com/mbadanoiu/CVE-2023-40037\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/5931"}, {"timestamp": "2023-12-13T01:20:43.886Z", "date_only": false, "value": "2023-12-13T01:20:43.886584Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-40037", "record": "GSD-2023-40037", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T18:24:54.979Z", "date_only": false, "value": "2024-08-02T18:24:54.979Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-40037", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:57:15.520Z", "date_only": false, "value": "2024-08-15T17:57:15.520+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2100", "record": "WID-SEC-W-2023-2100", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-16T08:52:58Z", "date_only": false, "value": "2024-08-16T08:52:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2107", "record": "CVE-2023-40037", "field": "creation_timestamp", "uuid": "416ea594-b262-4183-a4a1-d4d56e702ebc", "content": "#Threat_Research\n\"Incomplete Validation of JDBC and JNDI Connection URLs in Apache NiFi (CVE-2023-40037)\",\u00a0 2023.\n]-> https://github.com/mbadanoiu/CVE-2023-40037", "url": "https://t.me/Rootsec_2/2107"}, {"timestamp": "2024-09-27T20:06:15.715Z", "date_only": false, "value": "2024-09-27T20:06:15.715265Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-40037", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-09-27T20:06:15.715Z", "date_only": false, "value": "2024-09-27T20:06:15.715265Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40037", "record": "FKIE_CVE-2023-40037", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-27T20:06:28.071Z", "date_only": false, "value": "2024-09-27T20:06:28.071Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-40037", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-10-28T06:52:18Z", "date_only": false, "value": "2024-10-28T06:52:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9467", "record": "CVE-2023-40037", "field": "creation_timestamp", "uuid": "22b0e7a7-00a7-4f9c-bfc0-638072d011ab", "content": "#Threat_Research\n\"Incomplete Validation of JDBC and JNDI Connection URLs in Apache NiFi (CVE-2023-40037)\",\u00a02023.\n]-> https://github.com/mbadanoiu/CVE-2023-40037", "url": "https://t.me/CyberSecurityTechnologies/9467"}, {"timestamp": "2025-02-13T17:03:21.877Z", "date_only": false, "value": "2025-02-13T17:03:21.877Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-40037", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-13T19:10:21Z", "date_only": false, "value": "2025-02-13T19:10:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-23QF-3JF9-H3Q9", "record": "GHSA-23QF-3JF9-H3Q9", "field": "modified"}, {"timestamp": "2025-09-12T11:47:01.518Z", "date_only": false, "value": "2025-09-12T11:47:01.518Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-NIFI-2023-40037", "record": "BIT-NIFI-2023-40037", "field": "published"}, {"timestamp": "2026-06-17T06:15:52.710Z", "date_only": false, "value": "2026-06-17T06:15:52.710", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40037", "record": "FKIE_CVE-2023-40037", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-NIFI-2023-40037", "record": "BIT-NIFI-2023-40037", "field": "modified"}]}