{"metadata": {"vulnerability": "ghsa-vfrj-fv6p-3cpf", "count": 11, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 7}}, "data": [{"timestamp": "2023-05-24T13:46:35.953Z", "date_only": false, "value": "2023-05-24T13:46:35.953Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-33965", "record": "CVE-2023-33965", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-06-01T14:10:54.644Z", "date_only": false, "value": "2023-06-01T14:10:54.644Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-33965", "record": "CVE-2023-33965", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-06-01T14:10:54.644Z", "date_only": false, "value": "2023-06-01T14:10:54.644Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-33965 / GitHub_M", "record": "CVE-2023-33965", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-01T15:15:09Z", "date_only": false, "value": "2023-06-01T15:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-vfrj-fv6p-3cpf", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-06-06T01:38:11Z", "date_only": false, "value": "2023-06-06T01:38:11Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-vfrj-fv6p-3cpf", "field": "published"}, {"timestamp": "2023-06-06T01:38:11Z", "date_only": false, "value": "2023-06-06T01:38:11Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-vfrj-fv6p-3cpf", "field": "modified"}, {"timestamp": "2024-08-02T15:54:14.106Z", "date_only": false, "value": "2024-08-02T15:54:14.106Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-33965 / CVE", "record": "CVE-2023-33965", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-09T16:56:36.455Z", "date_only": false, "value": "2025-01-09T16:56:36.455137Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-33965 / CISA-ADP", "record": "CVE-2023-33965", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-09T16:57:06.896Z", "date_only": false, "value": "2025-01-09T16:57:06.896Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-33965", "record": "CVE-2023-33965", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-09T16:57:06.896Z", "date_only": false, "value": "2025-01-09T16:57:06.896Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-33965 / CISA-ADP", "record": "CVE-2023-33965", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-09T17:18:49Z", "date_only": false, "value": "2025-01-09T17:18:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/984", "record": "GHSA-VFRJ-FV6P-3CPF", "field": "creation_timestamp", "uuid": "86f89f12-0246-47f2-925c-94c41b064832", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-33965\n\ud83d\udd39 Description: Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remote code execution. A patch is available in version 20230606.\n\ud83d\udccf Published: 2023-06-01T14:10:54.644Z\n\ud83d\udccf Modified: 2025-01-09T16:57:06.896Z\n\ud83d\udd17 References:\n1. https://github.com/txthinking/brook/security/advisories/GHSA-vfrj-fv6p-3cpf\n2. https://github.com/txthinking/brook/commit/314d7070c37babf6c38a0fe1eada872bb74bf03e", "url": "https://t.me/DarkWebInformer_CVEAlerts/984"}]}