{"metadata": {"vulnerability": "cve-2023-26493", "count": 16, "kinds": {"milestone": 3, "sighting": 3, "kev": 0, "other": 10}}, "data": [{"timestamp": "2023-02-23T23:22:58.577Z", "date_only": false, "value": "2023-02-23T23:22:58.577Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-26493", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-03-27T21:35:36.844Z", "date_only": false, "value": "2023-03-27T21:35:36.844Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-26493", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-03-27T21:35:36.844Z", "date_only": false, "value": "2023-03-27T21:35:36.844Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2023-26493", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-03-27T22:15:00Z", "date_only": false, "value": "2023-03-27T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-26493", "record": "GSD-2023-26493", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-03-27T22:15:21.673Z", "date_only": false, "value": "2023-03-27T22:15:21.673", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26493", "record": "FKIE_CVE-2023-26493", "field": "published"}, {"timestamp": "2023-03-28T02:26:17Z", "date_only": false, "value": "2023-03-28T02:26:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/60847", "record": "CVE-2023-26493", "field": "creation_timestamp", "uuid": "9c1e3214-7b8d-4675-9aeb-95f72851e4fb", "content": "\u203c CVE-2023-26493 \u203c\n\nCocos Engine is an open-source framework for building 2D & 3D real-time rendering and interactive content. In the github repo for Cocos Engine the `web-interface-check.yml` was subject to command injection. The `web-interface-check.yml` was triggered when a pull request was opened or updated and contained the user controllable field `(${{ github.head_ref }} \u00e2\u20ac\u201c the name of the fork\u00e2\u20ac\u2122s branch)`. This would allow an attacker to take over the GitHub Runner and run custom commands (potentially stealing secrets such as GITHUB_TOKEN) and altering the repository. The workflow has since been removed for the repository. There are no actions required of users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/60847"}, {"timestamp": "2023-04-03T18:26:00Z", "date_only": false, "value": "2023-04-03T18:26Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-26493", "record": "GSD-2023-26493", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:20:53.853Z", "date_only": false, "value": "2023-12-13T01:20:53.853916Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-26493", "record": "GSD-2023-26493", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T11:53:52.922Z", "date_only": false, "value": "2024-08-02T11:53:52.922Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-26493", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-19T15:51:20.010Z", "date_only": false, "value": "2025-02-19T15:51:20.010460Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-26493", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-19T15:51:20.010Z", "date_only": false, "value": "2025-02-19T15:51:20.010460Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26493", "record": "FKIE_CVE-2023-26493", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-19T15:51:24.133Z", "date_only": false, "value": "2025-02-19T15:51:24.133Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-26493", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-19T15:51:24.133Z", "date_only": false, "value": "2025-02-19T15:51:24.133Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-26493", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:43:27.577Z", "date_only": false, "value": "2026-06-17T05:43:27.577", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-26493", "record": "FKIE_CVE-2023-26493", "field": "lastModified"}, {"timestamp": "2026-09-02T01:00:09.063Z", "date_only": false, "value": "2026-09-02T01:00:09.063056Z", "kind": "sighting", "label": "Seen", "source": "Telegram/U-Lw1mLsBIRfCm1Ollw0n6rUh-gbSxMVEkANJuForVtnctY", "record": "CVE-2023-26493", "field": "creation_timestamp", "uuid": "e60373a0-60bb-4221-be45-b76fc14639ad"}, {"timestamp": "2026-09-03T00:00:56.454Z", "date_only": false, "value": "2026-09-03T00:00:56.454994Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/U-Lw1mLsBIRfCm1Ollw0n6rUh-gbSxMVEkANJuForVtnctY", "record": "CVE-2023-26493", "field": "creation_timestamp", "uuid": "22cd6831-84c9-4dd7-ac06-02a48462df6d"}]}