{"metadata": {"vulnerability": "cve-2023-40195", "count": 22, "kinds": {"milestone": 5, "sighting": 2, "kev": 0, "other": 15}}, "data": [{"timestamp": "2023-08-10T09:26:47.223Z", "date_only": false, "value": "2023-08-10T09:26:47.223Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-40195", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-08-28T07:50:01.211Z", "date_only": false, "value": "2023-08-28T07:50:01.211Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-40195", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-08-28T07:50:01.211Z", "date_only": false, "value": "2023-08-28T07:50:01.211Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "cve-2023-40195", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-08-28T08:15:00Z", "date_only": false, "value": "2023-08-28T08:15:00+00:00", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2023-156", "record": "PYSEC-2023-156", "field": "published"}, {"timestamp": "2023-08-28T08:15:00Z", "date_only": false, "value": "2023-08-28T08:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-40195", "record": "GSD-2023-40195", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-08-28T08:15:14Z", "date_only": false, "value": "2023-08-28T08:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-8Q28-PW9G-W82C", "record": "GHSA-8Q28-PW9G-W82C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-08-28T08:15:14.797Z", "date_only": false, "value": "2023-08-28T08:15:14.797", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40195", "record": "FKIE_CVE-2023-40195", "field": "published"}, {"timestamp": "2023-08-28T09:30:20Z", "date_only": false, "value": "2023-08-28T09:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-8Q28-PW9G-W82C", "record": "GHSA-8Q28-PW9G-W82C", "field": "published"}, {"timestamp": "2023-08-28T12:26:58Z", "date_only": false, "value": "2023-08-28T12:26:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/69273", "record": "CVE-2023-40195", "field": "creation_timestamp", "uuid": "292c0640-8778-4092-b795-bc757f2c92d6", "content": "\u203c CVE-2023-40195 \u203c\n\nDeserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.When the Apache Spark provider is installed on an Airflow deployment, an Airflow user that is authorized to configure Spark hooks can effectively run arbitrary code on the Airflow node by pointing it at a malicious Spark server. Prior to version 4.1.3, this was not called out in the documentation explicitly, so it is possible that administrators provided authorizations to configure Spark hooks without taking this into account. We recommend administrators to review their configurations to make sure the authorization to configure Spark hooks is only provided to fully trusted users.To view the warning in the docs please visit\u00c2\u00a0 https://airflow.apache.org/docs/apache-airflow-providers-apache-spark/4.1.3/connections/spark.html\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/69273"}, {"timestamp": "2023-08-31T00:00:00Z", "date_only": true, "value": "2023-08-31", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-85614", "record": "CNVD-2023-85614", "field": "submitTime"}, {"timestamp": "2023-09-01T17:14:00Z", "date_only": false, "value": "2023-09-01T17:14Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-40195", "record": "GSD-2023-40195", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-09-01T18:27:11.679Z", "date_only": false, "value": "2023-09-01T18:27:11.679668+00:00", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2023-156", "record": "PYSEC-2023-156", "field": "modified"}, {"timestamp": "2023-09-08T16:07:57Z", "date_only": false, "value": "2023-09-08T16:07:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/135724", "record": "CVE-2023-40195", "field": "creation_timestamp", "uuid": "2896116a-d8b0-4651-9ee7-fe3461fa2d6d", "content": "https://ift.tt/pSBgC1w\nInternet Bug Bounty: CVE-2023-40195: Apache Airflow Spark Provider Deserialization Vulnerability RCE", "url": "https://t.me/ctinow/135724"}, {"timestamp": "2023-11-13T00:00:00Z", "date_only": true, "value": "2023-11-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-85614", "record": "CNVD-2023-85614", "field": "openTime"}, {"timestamp": "2023-12-13T01:20:43.670Z", "date_only": false, "value": "2023-12-13T01:20:43.670811Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-40195", "record": "GSD-2023-40195", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-02T18:24:55.714Z", "date_only": false, "value": "2024-08-02T18:24:55.714Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-40195", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-06T18:08:31Z", "date_only": false, "value": "2024-09-06T18:08:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-8Q28-PW9G-W82C", "record": "GHSA-8Q28-PW9G-W82C", "field": "modified"}, {"timestamp": "2025-04-23T13:27:26.308Z", "date_only": false, "value": "2025-04-23T13:27:26.308844Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-40195", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-23T13:27:26.308Z", "date_only": false, "value": "2025-04-23T13:27:26.308844Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40195", "record": "FKIE_CVE-2023-40195", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T16:19:19.884Z", "date_only": false, "value": "2025-04-23T16:19:19.884Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-40195", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T16:19:19.884Z", "date_only": false, "value": "2025-04-23T16:19:19.884Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-40195", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:16:39.113Z", "date_only": false, "value": "2026-06-17T06:16:39.113", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-40195", "record": "FKIE_CVE-2023-40195", "field": "lastModified"}]}