{"metadata": {"vulnerability": "cve-2023-49964", "count": 18, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2023-12-04T00:00:00Z", "date_only": false, "value": "2023-12-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-49964", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-09T11:00:14Z", "date_only": false, "value": "2023-12-09T11:00:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/6122", "record": "CVE-2023-49964", "field": "creation_timestamp", "uuid": "9e9f6abb-6d49-472c-90ed-d875d8eec644", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco\nURL\uff1ahttps://github.com/mbadanoiu/CVE-2023-49964\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/6122"}, {"timestamp": "2023-12-10T12:43:01Z", "date_only": false, "value": "2023-12-10T12:43:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9557", "record": "CVE-2023-49964", "field": "creation_timestamp", "uuid": "81f598ac-9413-4b89-b72a-03285ae943e3", "content": "#exploit\n1. SonicWall WXA - Authentication Bypass and RCE Vulnerability\nhttps://www.praetorian.com/blog/sonicwall-wxa-authentication-bypass-and-rce-vulnerability\n\n2. CVE-2023-49964:\nFreeMarker Server-Side Template Injection in Alfresco\nhttps://github.com/mbadanoiu/CVE-2023-49964\n\n3. CVE-2022-21392:\nLPE via NMR SUID in Oracle Enterprise Manager\nhttps://github.com/mbadanoiu/CVE-2022-21392", "url": "https://t.me/CyberSecurityTechnologies/9557"}, {"timestamp": "2023-12-11T00:00:00Z", "date_only": false, "value": "2023-12-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-49964", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-12-11T06:53:58Z", "date_only": false, "value": "2023-12-11T06:53:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/darkcommunityofficial/189", "record": "CVE-2023-49964", "field": "creation_timestamp", "uuid": "b06df3c1-e28b-4514-88d0-9587c98a398f", "content": "#exploit\n\n1. #SonicWall WXA - Authentication Bypass and #RCE Vulnerability\n\nhttps://www.praetorian.com/blog/sonicwall-wxa-authentication-bypass-and-rce-vulnerability\n\n2. #CVE-2023-49964:\nFreeMarker Server-Side Template Injection in #Alfresco\n\nhttps://github.com/mbadanoiu/CVE-2023-49964\n\n3. CVE-2022-21392:\n#LPE via NMR SUID in #Oracle Enterprise Manager\n\nhttps://github.com/mbadanoiu/CVE-2022-21392", "url": "https://t.me/darkcommunityofficial/189"}, {"timestamp": "2023-12-11T07:19:12.103Z", "date_only": false, "value": "2023-12-11T07:19:12.103Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2023-49964", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-12-11T08:15:06Z", "date_only": false, "value": "2023-12-11T08:15:06Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2CW4-G2QV-F48W", "record": "GHSA-2CW4-G2QV-F48W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-12-11T08:15:06.603Z", "date_only": false, "value": "2023-12-11T08:15:06.603", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49964", "record": "FKIE_CVE-2023-49964", "field": "published"}, {"timestamp": "2023-12-11T08:15:06.603Z", "date_only": false, "value": "2023-12-11T08:15:06.603", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-49964", "record": "GSD-2023-49964", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-12-11T09:30:54Z", "date_only": false, "value": "2023-12-11T09:30:54Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2CW4-G2QV-F48W", "record": "GHSA-2CW4-G2QV-F48W", "field": "published"}, {"timestamp": "2023-12-13T01:20:34.947Z", "date_only": false, "value": "2023-12-13T01:20:34.947272Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-49964", "record": "GSD-2023-49964", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-14T14:36:17.293Z", "date_only": false, "value": "2023-12-14T14:36:17.293", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-49964", "record": "GSD-2023-49964", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2023-12-14T15:30:21Z", "date_only": false, "value": "2023-12-14T15:30:21Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2CW4-G2QV-F48W", "record": "GHSA-2CW4-G2QV-F48W", "field": "modified"}, {"timestamp": "2024-01-01T13:02:29Z", "date_only": false, "value": "2024-01-01T13:02:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/161298", "record": "CVE-2023-49964", "field": "creation_timestamp", "uuid": "d7ec3e81-6b39-4748-846d-c40b3bac676c", "content": "https://ift.tt/v9M8DsS\nCVE-2023-49964 | Hyland Alfresco Community Edition up to 7.2.0 Template folder.get.html.ftl injection", "url": "https://t.me/ctinow/161298"}, {"timestamp": "2024-08-02T22:09:49.648Z", "date_only": false, "value": "2024-08-02T22:09:49.648Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-49964", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-02T22:09:49.648Z", "date_only": false, "value": "2024-08-02T22:09:49.648Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-49964", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T08:56:10Z", "date_only": false, "value": "2024-08-16T08:56:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2236", "record": "CVE-2023-49964", "field": "creation_timestamp", "uuid": "435a4e45-c8e0-407b-b056-7e9a1b31ceb6", "content": "#exploit\n1. SonicWall WXA - Authentication Bypass and RCE Vulnerability\nhttps://www.praetorian.com/blog/sonicwall-wxa-authentication-bypass-and-rce-vulnerability\n\n2. CVE-2023-49964:\nFreeMarker Server-Side Template Injection in Alfresco\nhttps://github.com/mbadanoiu/CVE-2023-49964\n\n3. CVE-2022-21392:\nLPE via NMR SUID in Oracle Enterprise Manager\nhttps://github.com/mbadanoiu/CVE-2022-21392", "url": "https://t.me/Rootsec_2/2236"}, {"timestamp": "2026-06-17T06:36:47.780Z", "date_only": false, "value": "2026-06-17T06:36:47.780", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-49964", "record": "FKIE_CVE-2023-49964", "field": "lastModified"}]}