{"metadata": {"vulnerability": "cve-2022-23614", "count": 30, "kinds": {"milestone": 5, "sighting": 8, "kev": 0, "other": 17}}, "data": [{"timestamp": "2022-01-19T00:00:00Z", "date_only": false, "value": "2022-01-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-23614", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-04T00:00:00Z", "date_only": true, "value": "2022-02-04", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-23614", "record": "GSD-2022-23614", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-02-04T22:25:11Z", "date_only": false, "value": "2022-02-04T22:25:11.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-23614", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-04T23:15:00Z", "date_only": false, "value": "2022-02-04T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5MV2-RX3Q-4W2V", "record": "GHSA-5MV2-RX3Q-4W2V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-04T23:15:00Z", "date_only": false, "value": "2022-02-04T23:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-23614", "record": "UBUNTU-CVE-2022-23614", "field": "published"}, {"timestamp": "2022-02-04T23:15:00Z", "date_only": false, "value": "2022-02-04T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-23614", "record": "GSD-2022-23614", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-04T23:15:15.727Z", "date_only": false, "value": "2022-02-04T23:15:15.727", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23614", "record": "FKIE_CVE-2022-23614", "field": "published"}, {"timestamp": "2022-02-05T02:45:33Z", "date_only": false, "value": "2022-02-05T02:45:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/36911", "record": "CVE-2022-23614", "field": "creation_timestamp", "uuid": "1ba51cd0-c182-467e-97fb-59b2b84203ae", "content": "\u203c CVE-2022-23614 \u203c\n\nTwig is an open source template language for PHP. When in a sandbox mode, the `arrow` parameter of the `sort` filter must be a closure to avoid attackers being able to run arbitrary PHP functions. In affected versions this constraint was not properly enforced and could lead to code injection of arbitrary PHP code. Patched versions now disallow calling non Closure in the `sort` filter as is the case for some other filters. Users are advised to upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/36911"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": true, "value": "2022-02-09", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-11212", "record": "CNVD-2022-11212", "field": "submitTime"}, {"timestamp": "2022-02-10T22:21:48Z", "date_only": false, "value": "2022-02-10T22:21:48Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5MV2-RX3Q-4W2V", "record": "GHSA-5MV2-RX3Q-4W2V", "field": "published"}, {"timestamp": "2022-02-11T19:16:32Z", "date_only": false, "value": "2022-02-11T19:16:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5MV2-RX3Q-4W2V", "record": "GHSA-5MV2-RX3Q-4W2V", "field": "modified"}, {"timestamp": "2022-02-17T00:00:00Z", "date_only": true, "value": "2022-02-17", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-11212", "record": "CNVD-2022-11212", "field": "openTime"}, {"timestamp": "2022-03-24T14:06:10Z", "date_only": false, "value": "2022-03-24T14:06:10.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2022-23614", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-07-18T10:17:49Z", "date_only": false, "value": "2022-07-18T10:17:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2730", "record": "CVE-2022-23614", "field": "creation_timestamp", "uuid": "9823cac7-1d33-4dd2-ac62-574a818449f1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-23614 (Twig sort filter code execution)\nURL\uff1ahttps://github.com/davwwwx/CVE-2022-23614\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2730"}, {"timestamp": "2022-07-18T20:59:35Z", "date_only": false, "value": "2022-07-18T20:59:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2240", "record": "CVE-2022-23614", "field": "creation_timestamp", "uuid": "263cf28c-132a-44b8-963b-ac7844d942c6", "content": "#CVE-2022\n\nPoC for CVE-2022-23614 (Twig sort filter code execution)\n\nhttps://github.com/davwwwx/CVE-2022-23614\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2240"}, {"timestamp": "2022-07-19T12:12:47Z", "date_only": false, "value": "2022-07-19T12:12:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BnM5S5zNNeaAgZhmsQ5GC58SGsVwUigmzA5S5tsXcbsUcw", "record": "CVE-2022-23614", "field": "creation_timestamp", "uuid": "b9a4a02a-14cf-47ab-a50f-6d62b7647c73"}, {"timestamp": "2022-07-19T13:14:02Z", "date_only": false, "value": "2022-07-19T13:14:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/341", "record": "CVE-2022-23614", "field": "creation_timestamp", "uuid": "2d4d2a85-3882-4f70-9b70-d4a057a365a2", "content": "CVE-2022-23614 : PHP Twig \"sort\" filter code execution - sandbox bypass\nhttps://github.com/davwwwx/CVE-2022-23614", "url": "https://t.me/MrVGunz/341"}, {"timestamp": "2022-07-19T13:38:52Z", "date_only": false, "value": "2022-07-19T13:38:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/862", "record": "CVE-2022-23614", "field": "creation_timestamp", "uuid": "a0ec41f4-4fcc-4977-9c8e-48c1866af46c", "content": "Updates On Hackbyte Forum:-\n\n\ud83d\udcccSmbpentest: Test Samba Servers which may have been configured improperly for anonymous access to vulnerable shares\n\n\ud83d\udcccLBOZO: A hybrid Windows Ransomware\n\n\ud83d\udcccHoaxshell: An unconventional Windows reverse shell, currently undetected by Microsoft Defender and other AV solutions, solely based on http(s) traffic\n\n\ud83d\udcccPing Castle Cloud\n\n\ud83d\udcccCoffeeLdr\n\n\ud83d\udcccZimbra #Exploit CVE-2022-30333\n\n\ud83d\udcccCVE-2022-24086 RCE POC\n\n\ud83d\udcccdata.gov.uk \u2013 UK Government Backups\n\n\ud83d\udccctelefonica Ecuador CRM Files Leaks\n\n\ud83d\udcccSvetlogorsk39.ru leak\n\n\ud83d\udcccrbcd-attack\n\n\ud83d\udcccRustyTokenManipulation\n\n\ud83d\udcccOralyzer - Open Redirection Analyzer\n\n\ud83d\udcccSalus \u2013 SBOM Tool\n\n\ud83d\udcccSliver GUI client.\n\n\ud83d\udcccCVE-2022-32119 - Arox-Unrestricted-File-Upload\n\n\ud83d\udcccNodeJS Ransomware\n\n\ud83d\udcccDirble - Fast directory scanning and scraping tool\n\n\ud83d\udcccWebView2-Cookie-Stealer\n\n\ud83d\udcccZombieThread - Another meterpreter injection technique using C# that attempts to bypass WD.\n\n\ud83d\udcccEvil Clippy\n\n\ud83d\udcccEvtx Log (xml) Browser\n\n\ud83d\udcccCVE-2022-30333\n\n\ud83d\udcccCVE-2022-23614: PoC for CVE-2022-23614 (Twig sort filter code execution/sandbox bypass)\n\n\ud83d\udcccCVE-2022-33891 - Apache Spark shell command injection\n\n\ud83d\udcccEJS, Server side template injection RCE (CVE-2022-29078)\n\n\ud83d\udcccBinary Ninja Commercial 3.1.3469 (2022-05-31)\n\n\ud83d\udccccitycollege.edu Health University Leak\n\n\ud83d\udcccFull HHIDE.ORG forum dump\n\n\ud83d\udcccdanish.my Leak\n\n\ud83d\udcccstripchat.com Leak\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014-\n\n\ud83d\udc49\ud83c\udffb\ud83d\udc49\ud83c\udffb Updates:- https://bit.ly/3yRyah3 \ud83d\udc48\ud83c\udffb\ud83d\udc48\ud83c\udffb", "url": "https://t.me/crackcodes/862"}, {"timestamp": "2023-06-27T00:00:00Z", "date_only": true, "value": "2023-06-27", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-23614", "record": "GSD-2022-23614", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-06-27T02:39:00Z", "date_only": false, "value": "2023-06-27T02:39Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-23614", "record": "GSD-2022-23614", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:35.272Z", "date_only": false, "value": "2023-12-13T01:19:35.272808Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-23614", "record": "GSD-2022-23614", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T03:43:46.974Z", "date_only": false, "value": "2024-08-03T03:43:46.974Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-23614", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-23T15:56:43.403Z", "date_only": false, "value": "2025-04-23T15:56:43.403255Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-23614", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-23T15:56:43.403Z", "date_only": false, "value": "2025-04-23T15:56:43.403255Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23614", "record": "FKIE_CVE-2022-23614", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T19:08:27.990Z", "date_only": false, "value": "2025-04-23T19:08:27.990Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-23614", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T19:08:27.990Z", "date_only": false, "value": "2025-04-23T19:08:27.990Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-23614", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-08T16:50:02Z", "date_only": false, "value": "2025-09-08T16:50:02Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-23614", "record": "UBUNTU-CVE-2022-23614", "field": "modified"}, {"timestamp": "2026-06-17T04:30:29.140Z", "date_only": false, "value": "2026-06-17T04:30:29.140", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-23614", "record": "FKIE_CVE-2022-23614", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:18.719Z", "date_only": false, "value": "2026-07-29T12:00:18.719208Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/16326", "record": "CVE-2022-23614", "field": "creation_timestamp", "uuid": "67ef0cc9-0952-4f57-acf5-c41d72e11018", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-23614*\nGithub: https://github.com/4rtamis/CVE-2022-23614", "url": "https://t.me/CVEhub/16326"}, {"timestamp": "2026-07-31T00:00:37.864Z", "date_only": false, "value": "2026-07-31T00:00:37.864730Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/16326", "record": "CVE-2022-23614", "field": "creation_timestamp", "uuid": "334a5c8e-16b4-4645-ba75-9d7a5dfadcea", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-23614*\nGithub: https://github.com/4rtamis/CVE-2022-23614", "url": "https://t.me/CVEhub/16326"}]}