{"vulnerability": "CVE-2022-0337", "sightings": [{"uuid": "d16c943c-d619-4cb1-a730-173c1e8755c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-0337", "type": "published-proof-of-concept", "source": "https://t.me/tmsilent/1182", "content": "Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\n\nhttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera", "creation_timestamp": "2022-03-19T17:52:14.000000Z"}, {"uuid": "5fc1ba0a-e663-4f57-b2fe-c3154bbf5a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-0337", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5645", "content": "#exploit\n1. CVE-2022-24112:\nApache APISIX < 2.12.1 RCE and Docker Lab\nhttps://github.com/twseptian/cve-2022-24112\nhttps://github.com/Mr-xn/CVE-2022-24112\n]-> Check:\nhttps://github.com/shakeman8/CVE-2022-24112\n\n2. CVE-2022-0337:\nSystem environment variables leak on Google Chrome, Microsoft Edge and Opera\nhttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera", "creation_timestamp": "2022-03-21T11:00:33.000000Z"}, {"uuid": "2e9805f8-2296-4e0c-b0eb-3dc853557fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-0337", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1686", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1a\ud83c\udfa9 \ud83e\udd1f\ud83c\udffb [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\nURL\uff1ahttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-03-19T12:09:05.000000Z"}, {"uuid": "bccfcde6-733b-4cf5-a4f9-925b5b2d86de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-0337", "type": "published-proof-of-concept", "source": "Telegram/is39w-43gnzZg3G03Yjkzji1brkGQqh4d2xqLN1XKHeCkbJG", "content": "", "creation_timestamp": "2022-03-19T16:52:05.000000Z"}, {"uuid": "1ae12511-99a3-439f-b119-8e702921d6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-0337", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/6101", "content": "\ud83c\udfa9 \ud83e\udd1f\ud83c\udffb [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337\n\nhttps://github.com/Puliczek/CVE-2022-0337-PoC-Google-Chrome-Microsoft-Edge-Opera", "creation_timestamp": "2022-03-22T00:15:45.000000Z"}, {"uuid": "37aa1177-bd0a-42cc-8809-f2048cd36fac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-0337", "type": "published-proof-of-concept", "source": "Telegram/fvQgdjlcf4AwXncPdzmcAB4MfD3TdDHwVjIJWqCVLzkPIKOJ", "content": "", "creation_timestamp": "2022-03-19T17:54:20.000000Z"}, {"uuid": "4835f6d5-6d85-438b-8b83-434089589376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-0337", "type": "seen", "source": "https://t.me/arpsyndicate/312", "content": "#ExploitObserverAlert\n\nCVE-2022-0337\n\nDESCRIPTION: Exploit Observer has 12 entries related to CVE-2022-0337. Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2023-11-21T07:37:49.000000Z"}, {"uuid": "c3131a85-3a93-445e-a5a9-81251837fe39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-0337", "type": "seen", "source": "https://t.me/cibsecurity/55788", "content": "\u203c CVE-2022-0337 \u203c\n\nInappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive information via a crafted HTML page. (Chrome security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T02:16:45.000000Z"}]}