{"metadata": {"vulnerability": "CVE-2021-22951", "count": 18, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 13}}, "data": [{"timestamp": "2021-01-06T00:00:00Z", "date_only": false, "value": "2021-01-06T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2021-22951", "field": "cveMetadata.dateReserved"}, {"timestamp": "2021-11-19T18:10:14Z", "date_only": false, "value": "2021-11-19T18:10:14.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2021-22951", "field": "cveMetadata.datePublished"}, {"timestamp": "2021-11-19T18:10:14Z", "date_only": false, "value": "2021-11-19T18:10:14.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / hackerone", "record": "CVE-2021-22951", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2021-11-19T19:15:00Z", "date_only": false, "value": "2021-11-19T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RHF5-F553-XG82", "record": "GHSA-RHF5-F553-XG82", "field": "database_specific.nvd_published_at"}, {"timestamp": "2021-11-19T19:15:00Z", "date_only": false, "value": "2021-11-19T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2021-22951", "record": "GSD-2021-22951", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2021-11-19T19:15:08.193Z", "date_only": false, "value": "2021-11-19T19:15:08.193", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22951", "record": "FKIE_CVE-2021-22951", "field": "published"}, {"timestamp": "2021-11-19T22:17:12Z", "date_only": false, "value": "2021-11-19T22:17:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/32739", "record": "CVE-2021-22951", "field": "creation_timestamp", "uuid": "0a79e0d3-56f6-4de2-84bd-2f0a00117b04", "content": "\u203c CVE-2021-22951 \u203c\n\nUnauthorized individuals could view password protected files using view_inline in Concrete CMS (previously concrete 5) prior to version 8.5.7. Concrete CMS now checks to see if a file has a password in view_inline and, if it does, the file is not rendered.For version 8.5.6, the following mitigations were put in place a. restricting file types for view_inline to images only b. putting a warning in the file manager to advise users.Credit for discovery: \"Solar Security Research Team\"Concrete CMS security team CVSS scoring is 5.3: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NThis fix is also in Concrete version 9.0.0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/32739"}, {"timestamp": "2021-11-22T18:22:30Z", "date_only": false, "value": "2021-11-22T18:22:30Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RHF5-F553-XG82", "record": "GHSA-RHF5-F553-XG82", "field": "modified"}, {"timestamp": "2021-11-23T00:00:00Z", "date_only": true, "value": "2021-11-23", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2021-22951", "record": "GSD-2021-22951", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2021-11-23T00:00:00Z", "date_only": true, "value": "2021-11-23", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2021-94038", "record": "CNVD-2021-94038", "field": "submitTime"}, {"timestamp": "2021-11-23T13:15:00Z", "date_only": false, "value": "2021-11-23T13:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2021-22951", "record": "GSD-2021-22951", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-11-23T18:18:16Z", "date_only": false, "value": "2021-11-23T18:18:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RHF5-F553-XG82", "record": "GHSA-RHF5-F553-XG82", "field": "published"}, {"timestamp": "2021-11-24T00:00:00Z", "date_only": true, "value": "2021-11-24", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2021-22951", "record": "GSD-2021-22951", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2021-12-03T00:00:00Z", "date_only": true, "value": "2021-12-03", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2021-94038", "record": "CNVD-2021-94038", "field": "openTime"}, {"timestamp": "2023-12-13T01:23:24.711Z", "date_only": false, "value": "2023-12-13T01:23:24.711182Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2021-22951", "record": "GSD-2021-22951", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T18:58:26.191Z", "date_only": false, "value": "2024-08-03T18:58:26.191Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2021-22951", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T18:58:26.191Z", "date_only": false, "value": "2024-08-03T18:58:26.191Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2021-22951", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T03:38:05.770Z", "date_only": false, "value": "2026-06-17T03:38:05.770", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2021-22951", "record": "FKIE_CVE-2021-22951", "field": "lastModified"}]}