{"metadata": {"vulnerability": "cve-2023-50072", "count": 26, "kinds": {"milestone": 5, "sighting": 10, "kev": 0, "other": 11}}, "data": [{"timestamp": "2023-12-04T00:00:00Z", "date_only": false, "value": "2023-12-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-50072", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-13T01:20:31.315Z", "date_only": false, "value": "2023-12-13T01:20:31.315769Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-50072", "record": "GSD-2023-50072", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2023-12-22T13:47:08Z", "date_only": false, "value": "2023-12-22T13:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9637", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "9bc325e3-9101-4f1f-b686-b2c8fdea4ab3", "content": "#exploit\n1. CVE-2023-50072\nXSS vulnerability in OpenKM ver. 7.1.40\nhttps://github.com/ahrixia/CVE-2023-50072\n\n2. CVE-2020-24186:\nWordPress wpDiscuz 7.0.4 RCE\nhttps://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\n]-> reverse shell upload: https://github.com/substing/CVE-2020-24186_reverse_shell_upload", "url": "https://t.me/CyberSecurityTechnologies/9637", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-22T14:30:55Z", "date_only": false, "value": "2023-12-22T14:30:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-n8ya8-aUXXaHR8ytYPxF3dyXlZAyDoVwP1tmQyouhw29g", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "1af3f0f9-6756-4535-8af8-a2632cce6863", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-22T15:27:17Z", "date_only": false, "value": "2023-12-22T15:27:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3713", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "69cb199f-12d4-4b40-ba1b-674fee02ae27", "content": "https://github.com/ahrixia/CVE-2023-50072\n\nA stored cross-site scripting (XSS) vulnerability exists in OpenKM version 7.1.40.\n\n#github  #exploit  #XSS", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/3713", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-22T15:33:28Z", "date_only": false, "value": "2023-12-22T15:33:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ao0ZcAZMIyMaZ_PjlIDeclOLGtWyrbuWud4kTDgLYHNTTg", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "7c7195ba-7034-4c73-a243-648d3e4b27e5", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-23T20:45:28Z", "date_only": false, "value": "2023-12-23T20:45:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/1746", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "ab7bdd0a-559f-4b1e-b91a-60af9b24e0c7", "content": "https://github.com/ahrixia/CVE-2023-50072\n\nA stored cross-site scripting (XSS) vulnerability exists in OpenKM version 7.1.40.\n\n#github  #exploit  #XSS", "url": "https://t.me/CNArsenal/1746", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-01-13T00:00:00Z", "date_only": false, "value": "2024-01-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-50072", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-01-13T00:56:56.423Z", "date_only": false, "value": "2024-01-13T00:56:56.423Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2023-50072", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-13T01:15:38Z", "date_only": false, "value": "2024-01-13T01:15:38Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WM3G-QX6C-FJF6", "record": "GHSA-WM3G-QX6C-FJF6", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2024-01-13T01:15:38.663Z", "date_only": false, "value": "2024-01-13T01:15:38.663", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50072", "record": "FKIE_CVE-2023-50072", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-13T01:15:38.663Z", "date_only": false, "value": "2024-01-13T01:15:38.663", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-50072", "record": "GSD-2023-50072", "field": "namespaces.nvd.nist.gov.cve.published", "linked_record": true}, {"timestamp": "2024-01-13T02:26:42Z", "date_only": false, "value": "2024-01-13T02:26:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/167654", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "bfeebfbd-dbc9-4cb4-b750-072f06d9019e", "content": "https://ift.tt/Xe5Qjyb\nCVE-2023-50072", "url": "https://t.me/ctinow/167654"}, {"timestamp": "2024-01-13T03:30:17Z", "date_only": false, "value": "2024-01-13T03:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WM3G-QX6C-FJF6", "record": "GHSA-WM3G-QX6C-FJF6", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2024-01-19T19:57:08.307Z", "date_only": false, "value": "2024-01-19T19:57:08.307", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-50072", "record": "GSD-2023-50072", "field": "namespaces.nvd.nist.gov.cve.lastModified", "linked_record": true}, {"timestamp": "2024-01-19T21:30:34Z", "date_only": false, "value": "2024-01-19T21:30:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WM3G-QX6C-FJF6", "record": "GHSA-WM3G-QX6C-FJF6", "field": "modified", "linked_record": true}, {"timestamp": "2024-01-19T23:17:08Z", "date_only": false, "value": "2024-01-19T23:17:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/170451", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "6e3b728a-8e28-49b4-a521-846b1fa7c06d", "content": "https://ift.tt/hxUszIn\nCVE-2023-50072 Exploit", "url": "https://t.me/ctinow/170451"}, {"timestamp": "2024-02-03T06:36:10Z", "date_only": false, "value": "2024-02-03T06:36:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/178398", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "50cf10c0-5b25-4e71-b31c-330fab766601", "content": "https://ift.tt/xGJPBnD\nCVE-2023-50072 | OpenKM 7.1.40 Note Upload cross site scripting", "url": "https://t.me/ctinow/178398"}, {"timestamp": "2024-08-02T22:09:49.653Z", "date_only": false, "value": "2024-08-02T22:09:49.653Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-50072", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-16T08:57:36Z", "date_only": false, "value": "2024-08-16T08:57:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Rootsec_2/2320", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "673be19e-3529-4285-8c7d-822e75292d43", "content": "#exploit\n1. CVE-2023-50072\nXSS vulnerability in OpenKM ver. 7.1.40\nhttps://github.com/ahrixia/CVE-2023-50072\n\n2. CVE-2020-24186:\nWordPress wpDiscuz 7.0.4 RCE\nhttps://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\n]-> reverse shell upload: https://github.com/substing/CVE-2020-24186_reverse_shell_upload", "url": "https://t.me/Rootsec_2/2320", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-21T15:53:25Z", "date_only": false, "value": "2024-12-21T15:53:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ckeArsenal/109", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "702907d9-8d76-4024-9d23-a888754c7374", "content": "https://github.com/ahrixia/CVE-2023-50072\n\nA stored cross-site scripting (XSS) vulnerability exists in OpenKM version 7.1.40.\n\n#github  #exploit  #XSS", "url": "https://t.me/ckeArsenal/109", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-08T17:25:13.273Z", "date_only": false, "value": "2025-05-08T17:25:13.273227Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-50072", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-08T17:25:13.273Z", "date_only": false, "value": "2025-05-08T17:25:13.273227Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50072", "record": "FKIE_CVE-2023-50072", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-06-03T14:03:27.783Z", "date_only": false, "value": "2025-06-03T14:03:27.783Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-50072", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-03T14:03:27.783Z", "date_only": false, "value": "2025-06-03T14:03:27.783Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-50072", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:39:08.573Z", "date_only": false, "value": "2026-06-17T06:39:08.573", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50072", "record": "FKIE_CVE-2023-50072", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T20:45:55.034Z", "anchors": {"origin": {"timestamp": "2024-01-13T00:00:00Z", "date_only": false, "value": "2024-01-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-50072", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-01-13T00:00:00Z", "date_only": false, "value": "2024-01-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-50072", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-12-22T13:47:08Z", "date_only": false, "value": "2023-12-22T13:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9637", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "9bc325e3-9101-4f1f-b686-b2c8fdea4ab3", "content": "#exploit\n1. CVE-2023-50072\nXSS vulnerability in OpenKM ver. 7.1.40\nhttps://github.com/ahrixia/CVE-2023-50072\n\n2. CVE-2020-24186:\nWordPress wpDiscuz 7.0.4 RCE\nhttps://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\n]-> reverse shell upload: https://github.com/substing/CVE-2020-24186_reverse_shell_upload", "url": "https://t.me/CyberSecurityTechnologies/9637", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -1851172.0, "hours": -514.2144444444444, "days": -21.42560185185185, "min_seconds": -1937572.0, "max_seconds": -1851172.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2024-01-13T00:00:00Z", "date_only": false, "value": "2024-01-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-50072", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-12-22T13:47:08Z", "date_only": false, "value": "2023-12-22T13:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9637", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "9bc325e3-9101-4f1f-b686-b2c8fdea4ab3", "content": "#exploit\n1. CVE-2023-50072\nXSS vulnerability in OpenKM ver. 7.1.40\nhttps://github.com/ahrixia/CVE-2023-50072\n\n2. CVE-2020-24186:\nWordPress wpDiscuz 7.0.4 RCE\nhttps://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\n]-> reverse shell upload: https://github.com/substing/CVE-2020-24186_reverse_shell_upload", "url": "https://t.me/CyberSecurityTechnologies/9637", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 89066755.034464, "hours": 24740.76528735111, "days": 1030.8652203062964, "min_seconds": 88980355.034464, "max_seconds": 89066755.034464, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-01-13T00:00:00Z", "date_only": false, "value": "2024-01-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-50072", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T20:45:55.034Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 90917927.034464, "hours": 25254.979731795556, "days": 1052.290822158148, "min_seconds": 90917927.034464, "max_seconds": 90917927.034464, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-12-22T13:47:08Z", "date_only": false, "value": "2023-12-22T13:47:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9637", "record": "CVE-2023-50072", "field": "creation_timestamp", "uuid": "9bc325e3-9101-4f1f-b686-b2c8fdea4ab3", "content": "#exploit\n1. CVE-2023-50072\nXSS vulnerability in OpenKM ver. 7.1.40\nhttps://github.com/ahrixia/CVE-2023-50072\n\n2. CVE-2020-24186:\nWordPress wpDiscuz 7.0.4 RCE\nhttps://github.com/hev0x/CVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\n]-> reverse shell upload: https://github.com/substing/CVE-2020-24186_reverse_shell_upload", "url": "https://t.me/CyberSecurityTechnologies/9637", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T20:45:55.034Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}