{"metadata": {"vulnerability": "cve-2023-5256", "count": 30, "kinds": {"milestone": 7, "sighting": 3, "kev": 0, "other": 20}}, "data": [{"timestamp": "2023-09-20T22:00:00Z", "date_only": false, "value": "2023-09-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2410", "record": "WID-SEC-W-2023-2410", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-20T22:00:00Z", "date_only": false, "value": "2023-09-20T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2410", "record": "WID-SEC-W-2023-2410", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-20T22:00:00Z", "date_only": false, "value": "2023-09-20T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2410", "record": "WID-SEC-W-2023-2410", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-21T18:17:00Z", "date_only": false, "value": "2023-09-21T18:17:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / drupal", "record": "cve-2023-5256", "field": "containers.cna.datePublic"}, {"timestamp": "2023-09-28T18:13:12.881Z", "date_only": false, "value": "2023-09-28T18:13:12.881Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-5256", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-28T18:17:43.128Z", "date_only": false, "value": "2023-09-28T18:17:43.128Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-5256", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-28T18:17:43.128Z", "date_only": false, "value": "2023-09-28T18:17:43.128Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / drupal", "record": "cve-2023-5256", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-09-28T19:15:00Z", "date_only": false, "value": "2023-09-28T19:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-5256", "record": "UBUNTU-CVE-2023-5256", "field": "published"}, {"timestamp": "2023-09-28T19:15:00Z", "date_only": false, "value": "2023-09-28T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-5256", "record": "GSD-2023-5256", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-09-28T19:15:10Z", "date_only": false, "value": "2023-09-28T19:15:10Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RJQG-3H9M-FX5X", "record": "GHSA-RJQG-3H9M-FX5X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-28T19:15:10.977Z", "date_only": false, "value": "2023-09-28T19:15:10.977", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5256", "record": "FKIE_CVE-2023-5256", "field": "published"}, {"timestamp": "2023-09-28T21:30:58Z", "date_only": false, "value": "2023-09-28T21:30:58Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RJQG-3H9M-FX5X", "record": "GHSA-RJQG-3H9M-FX5X", "field": "published"}, {"timestamp": "2023-09-28T22:36:59Z", "date_only": false, "value": "2023-09-28T22:36:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/71222", "record": "CVE-2023-5256", "field": "creation_timestamp", "uuid": "1bbe6733-5108-4486-9bd9-9ef93e2077eb", "content": "\u203c CVE-2023-5256 \u203c\n\nIn certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and made available to anonymous users, leading to privilege escalation.This vulnerability only affects sites with the JSON:API module enabled, and can be mitigated by uninstalling JSON:API.The core REST and contributed GraphQL modules are not affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/71222"}, {"timestamp": "2023-10-05T14:54:00Z", "date_only": false, "value": "2023-10-05T14:54Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-5256", "record": "GSD-2023-5256", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-05T22:00:00Z", "date_only": false, "value": "2023-10-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2410", "record": "WID-SEC-W-2023-2410", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-05T22:00:00Z", "date_only": false, "value": "2023-10-05T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2410", "record": "WID-SEC-W-2023-2410", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-10-08T03:13:38Z", "date_only": false, "value": "2023-10-08T03:13:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hackingbra/36", "record": "CVE-2023-5256", "field": "creation_timestamp", "uuid": "244bc9ca-8c5a-45bd-8fa8-ba42905a16c7", "content": "\u2620\ufe0fCache poisoning in Drupal core\n \nAccording to the CVE-2023-5256 disclosure, you can cache admin session cookies by causing a 4xx response when visiting a crafted URL in JSON:API.\n\nYou can lure an admin using a link, steal his session cookies and gain administrative access to the website. In this way, an attacker can completely compromise the confidentiality, integrity and availability of the website.\n\nPoC\n\n/jsonapi/user/user?filter[a-labex][condition][path]=cachingyourcookie\n\n#web #cve #cache #drupal", "url": "https://t.me/hackingbra/36"}, {"timestamp": "2023-12-13T01:20:50.681Z", "date_only": false, "value": "2023-12-13T01:20:50.681029Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-5256", "record": "GSD-2023-5256", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-20T21:01:00Z", "date_only": false, "value": "2023-12-20T21:01:00Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RJQG-3H9M-FX5X", "record": "GHSA-RJQG-3H9M-FX5X", "field": "modified"}, {"timestamp": "2024-01-05T10:19:12Z", "date_only": false, "value": "2024-01-05T10:19:12.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/0d24c235-404c-4e01-9b05-ca476517dd11", "record": "CVE-2023-5256", "field": "creation_timestamp", "uuid": "8920d534-c1e3-427e-832b-ebef911c52a5"}, {"timestamp": "2024-03-06T10:51:30.695Z", "date_only": false, "value": "2024-03-06T10:51:30.695Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-DRUPAL-2023-5256", "record": "BIT-DRUPAL-2023-5256", "field": "published"}, {"timestamp": "2024-08-02T07:52:08.530Z", "date_only": false, "value": "2024-08-02T07:52:08.530Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-5256", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:58:42.280Z", "date_only": false, "value": "2024-08-15T17:58:42.280+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2410", "record": "WID-SEC-W-2023-2410", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-23T18:22:43.682Z", "date_only": false, "value": "2024-09-23T18:22:43.682965Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-5256", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2024-09-23T18:22:43.682Z", "date_only": false, "value": "2024-09-23T18:22:43.682965Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5256", "record": "FKIE_CVE-2023-5256", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-09-23T18:25:29.327Z", "date_only": false, "value": "2024-09-23T18:25:29.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-5256", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-09-23T18:25:29.327Z", "date_only": false, "value": "2024-09-23T18:25:29.327Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-5256", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-08T16:55:57Z", "date_only": false, "value": "2025-09-08T16:55:57Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-5256", "record": "UBUNTU-CVE-2023-5256", "field": "modified"}, {"timestamp": "2026-06-17T06:48:11.470Z", "date_only": false, "value": "2026-06-17T06:48:11.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5256", "record": "FKIE_CVE-2023-5256", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-DRUPAL-2023-5256", "record": "BIT-DRUPAL-2023-5256", "field": "modified"}]}