<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 28 May 2026 20:25:01 +0000</lastBuildDate>
    <item>
      <title>2b8d5ec9-c4f5-4674-a963-eb0dd842c354</title>
      <link>https://db.gcve.eu/sighting/2b8d5ec9-c4f5-4674-a963-eb0dd842c354/export</link>
      <description>{"uuid": "2b8d5ec9-c4f5-4674-a963-eb0dd842c354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-36232", "type": "seen", "source": "https://t.me/cibsecurity/23956", "content": "\u203c CVE-2020-36232 \u203c\n\nThe MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it incorrectly obtained application base url information from the executing http request which could be attacker controlled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-23T00:33:57.000000Z"}</description>
      <content:encoded>{"uuid": "2b8d5ec9-c4f5-4674-a963-eb0dd842c354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-36232", "type": "seen", "source": "https://t.me/cibsecurity/23956", "content": "\u203c CVE-2020-36232 \u203c\n\nThe MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it incorrectly obtained application base url information from the executing http request which could be attacker controlled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-02-23T00:33:57.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2b8d5ec9-c4f5-4674-a963-eb0dd842c354/export</guid>
      <pubDate>Tue, 23 Feb 2021 00:33:57 +0000</pubDate>
    </item>
  </channel>
</rss>
