{"metadata": {"vulnerability": "cve-2023-5480", "count": 56, "kinds": {"milestone": 10, "sighting": 12, "kev": 0, "other": 34}}, "data": [{"timestamp": "2023-10-10T00:12:40.725Z", "date_only": false, "value": "2023-10-10T00:12:40.725Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-5480", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-10-31T21:09:25Z", "date_only": false, "value": "2023-10-31T21:09:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/slonser_notes/829", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "9ae18ae3-b61a-4a87-8696-1ff108947728", "content": "CVE-2023-5480\nSeverity: High\nBounty: 16000$\n\u041e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c \u0445\u0440\u043e\u043c\u044b\nhttps://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_31.html", "url": "https://t.me/slonser_notes/829"}, {"timestamp": "2023-10-31T23:00:00Z", "date_only": false, "value": "2023-10-31T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-10-31T23:00:00Z", "date_only": false, "value": "2023-10-31T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-10-31T23:00:00Z", "date_only": false, "value": "2023-10-31T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-11-01T05:37:39Z", "date_only": false, "value": "2023-11-01T05:37:39.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cT02yvzMFi99VhMUXzXmr472URxBVRNGH6wGhnaCKWvZKpM", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "89fe09cc-2250-45f8-8577-04b38666e729"}, {"timestamp": "2023-11-01T17:13:59.444Z", "date_only": false, "value": "2023-11-01T17:13:59.444Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-5480", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-11-01T18:15:09Z", "date_only": false, "value": "2023-11-01T18:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C8PP-VXJ4-7MP3", "record": "GHSA-C8PP-VXJ4-7MP3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-11-01T18:15:09.930Z", "date_only": false, "value": "2023-11-01T18:15:09.930", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5480", "record": "FKIE_CVE-2023-5480", "field": "published"}, {"timestamp": "2023-11-01T18:15:09.930Z", "date_only": false, "value": "2023-11-01T18:15:09.930", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-5480", "record": "GSD-2023-5480", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-11-01T18:30:33Z", "date_only": false, "value": "2023-11-01T18:30:33Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C8PP-VXJ4-7MP3", "record": "GHSA-C8PP-VXJ4-7MP3", "field": "published"}, {"timestamp": "2023-11-01T21:22:18Z", "date_only": false, "value": "2023-11-01T21:22:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/73382", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "a69ec859-ec56-4a2f-8dad-fb5ae43a5206", "content": "\u203c CVE-2023-5480 \u203c\n\nInappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. (Chromium security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/73382"}, {"timestamp": "2023-11-03T00:00:00Z", "date_only": false, "value": "2023-11-03T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0909", "record": "CERTFR-2023-AVI-0909", "field": "last_revision_date"}, {"timestamp": "2023-11-03T00:00:00Z", "date_only": false, "value": "2023-11-03T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0909", "record": "CERTFR-2023-AVI-0909", "field": "initial_release_date"}, {"timestamp": "2023-11-03T00:00:00Z", "date_only": false, "value": "2023-11-03T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0909", "record": "CERTFR-2023-AVI-0909", "field": "revisions.0.revision_date"}, {"timestamp": "2023-11-05T23:00:00Z", "date_only": false, "value": "2023-11-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-08T21:30:36Z", "date_only": false, "value": "2023-11-08T21:30:36Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C8PP-VXJ4-7MP3", "record": "GHSA-C8PP-VXJ4-7MP3", "field": "modified"}, {"timestamp": "2023-11-09T23:00:00Z", "date_only": false, "value": "2023-11-09T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-11-12T23:00:00Z", "date_only": false, "value": "2023-11-12T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-11-14T15:14:02Z", "date_only": false, "value": "2023-11-14T15:14:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0368-1", "record": "OPENSUSE-SU-2023:0368-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-14T15:14:02Z", "date_only": false, "value": "2023-11-14T15:14:02Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0368-1", "record": "OPENSUSE-SU-2023:0368-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-11-14T15:14:02Z", "date_only": false, "value": "2023-11-14T15:14:02Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0368-1", "record": "OPENSUSE-SU-2023:0368-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-11-14T15:14:02Z", "date_only": false, "value": "2023-11-14T15:14:02Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0368-1", "record": "OPENSUSE-SU-2023:0368-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-26T23:00:00Z", "date_only": false, "value": "2023-11-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-12-13T01:20:50.497Z", "date_only": false, "value": "2023-12-13T01:20:50.497009Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-5480", "record": "GSD-2023-5480", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-28T17:22:16Z", "date_only": false, "value": "2024-01-28T17:22:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/4fcw4fF1XAek5Z_YyBUw9CKq4XIKJmpXAJBs7WYuWVXt1Q", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "c170159f-767d-4e34-9768-00df0dddb125"}, {"timestamp": "2024-01-31T10:59:01Z", "date_only": false, "value": "2024-01-31T10:59:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/9883", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "c59a9a53-49d0-4193-bbcd-a75eed689d1b", "content": "#exploit\n1. CVE-2023-6246:\nHeap-based buffer overflow in the glibc's syslog()\nhttps://www.openwall.com/lists/oss-security/2024/01/30/6\n\n2. CVE-2023-5480:\nChrome XSS\nhttps://blog.slonser.info/posts/cve-2023-5480\n\n3. CVE-2023-35636:\nOutlook Information Disclosure\nhttps://github.com/duy-31/CVE-2023-35636", "url": "https://t.me/CyberSecurityTechnologies/9883"}, {"timestamp": "2024-01-31T17:09:14.140Z", "date_only": false, "value": "2024-01-31T17:09:14.140Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "cve-2023-5480", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-31T17:15:19.470Z", "date_only": false, "value": "2024-01-31T17:15:19.470", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-5480", "record": "GSD-2023-5480", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-31T23:00:00Z", "date_only": false, "value": "2024-01-31T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2024-01-31T23:00:00Z", "date_only": false, "value": "2024-01-31T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13419-1", "record": "OPENSUSE-SU-2024:13419-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13423-1", "record": "OPENSUSE-SU-2024:13423-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13419-1", "record": "OPENSUSE-SU-2024:13419-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13423-1", "record": "OPENSUSE-SU-2024:13423-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13419-1", "record": "OPENSUSE-SU-2024:13419-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13423-1", "record": "OPENSUSE-SU-2024:13423-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13419-1", "record": "OPENSUSE-SU-2024:13419-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13423-1", "record": "OPENSUSE-SU-2024:13423-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-02T07:59:44.748Z", "date_only": false, "value": "2024-08-02T07:59:44.748Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-5480", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T18:00:51.888Z", "date_only": false, "value": "2024-08-15T18:00:51.888+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2790", "record": "WID-SEC-W-2023-2790", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-15T16:00:30Z", "date_only": false, "value": "2025-01-15T16:00:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/slonser_notes/880", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "c51aec46-5ea6-4648-ac11-cc4194e6bd5b", "content": "Portswigger \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u043d\u0438\u0435 \u0437\u0430 \u0442\u043e\u043f \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0439 2024 \u0433\u043e\u0434\u0430.\n\u0422\u0430\u043c \u043d\u043e\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0435\u0433\u043e 2 \u043c\u043e\u0438\u0445 \u0441\u0442\u0430\u0442\u044c\u0438\nCVE-2023-5480: Chrome new XSS Vector \nOld new email attacks \n\u0422\u0430\u043a \u0436\u0435 \u0441\u043e\u0432\u0435\u0442\u0443\u044e \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 Exploring the DOMPurify library: Bypasses and Fixes \u043e\u0442 K\u00e9vin Mizu\n\u041d\u0443 \u0438 \u0432 \u0446\u0435\u043b\u043e\u043c \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430, \u043c\u043d\u043e\u0433\u043e\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u0442\u044c, \u0442\u0430\u043a \u0447\u0442\u043e \u0447\u0438\u0442\u0430\u0435\u043c \u0438 \u0433\u043e\u043b\u043e\u0441\u0443\u0435\u043c!\n\n\u0427\u0438\u0442\u0430\u0442\u044c \u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u0430\u0442\u044c \u0442\u0443\u0442.", "url": "https://t.me/slonser_notes/880"}, {"timestamp": "2025-02-13T17:25:34.587Z", "date_only": false, "value": "2025-02-13T17:25:34.587Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-5480", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:48:40.750Z", "date_only": false, "value": "2026-06-17T06:48:40.750", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-5480", "record": "FKIE_CVE-2023-5480", "field": "lastModified"}, {"timestamp": "2026-07-26T02:00:14.949Z", "date_only": false, "value": "2026-07-26T02:00:14.949475Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/678", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "aaadc11e-13c3-4b4d-92be-1cc39ed5add7", "url": "https://t.me/cyberwarehouse/678"}, {"timestamp": "2026-07-27T00:00:27.189Z", "date_only": false, "value": "2026-07-27T00:00:27.189654Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/678", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "a44a88c7-5f00-4f8a-aed7-e7b422bc6c5f", "url": "https://t.me/cyberwarehouse/678"}, {"timestamp": "2026-07-29T12:02:18.157Z", "date_only": false, "value": "2026-07-29T12:02:18.157942Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4297", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "16244650-39a7-4df9-9145-6afd45f7e34e", "url": "https://t.me/reverseame/4297"}, {"timestamp": "2026-07-30T00:02:22.155Z", "date_only": false, "value": "2026-07-30T00:02:22.155800Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/4297", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "4695db3b-6d82-4cb6-8955-bbaffca7c57b", "url": "https://t.me/reverseame/4297"}, {"timestamp": "2026-08-02T08:02:14.010Z", "date_only": false, "value": "2026-08-02T08:02:14.010980Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4297", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "071c033f-aab9-45e4-a301-aa16fda12dbb", "url": "https://t.me/reverseame/4297"}, {"timestamp": "2026-08-03T02:07:17.185Z", "date_only": false, "value": "2026-08-03T02:07:17.185722Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/4297", "record": "CVE-2023-5480", "field": "creation_timestamp", "uuid": "f4904c20-c131-4352-ac77-76c0563e222c", "url": "https://t.me/reverseame/4297"}, {"timestamp": "2026-09-20T19:47:15Z", "date_only": false, "value": "2026-09-20T19:47:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0368-1", "record": "OPENSUSE-SU-2023:0368-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:47:15Z", "date_only": false, "value": "2026-09-20T19:47:15Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2023:0368-1", "record": "OPENSUSE-SU-2023:0368-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:00:21Z", "date_only": false, "value": "2026-09-20T21:00:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13419-1", "record": "OPENSUSE-SU-2024:13419-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:00:21Z", "date_only": false, "value": "2026-09-20T21:00:21Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13419-1", "record": "OPENSUSE-SU-2024:13419-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T21:00:26Z", "date_only": false, "value": "2026-09-20T21:00:26Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13423-1", "record": "OPENSUSE-SU-2024:13423-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:00:26Z", "date_only": false, "value": "2026-09-20T21:00:26Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:13423-1", "record": "OPENSUSE-SU-2024:13423-1", "field": "document.tracking.current_release_date"}]}