25:["$","title",null,{"children":"CVE-2022-28810 / CVE-2022-47966 Timeline | gt3 | Observable"}] 49:Tc8a,tl = { const timeline = tline; let htmlElements = [ `

${title}

` ]; let lastYear = ""; if (timeline !== undefined && timeline.length === 0) return html`

Please provide the timeline data.

`; timeline.forEach((t) => { if (isNaN(t.date)) { className = "big"; } else { var century = t.date[0] + "" + t.date[1]; var className = ""; if (lastYear !== century) { lastYear = century; className = " big"; } } htmlElements.push(`

${t.date}

${t.sentence}

`); }); htmlElements.push("

"); return html`

${htmlElements.join("")}

`; }4a:T94b,events = `date|sentence April 8, 2022|The vulnerability was assigned the identifier CVE-2022-28810 by MITRE Corporation.

April 9, 2022|ManageEngine released build 6122 of ADSelfService Plus to fix the vulnerability. The update removed the "custom script" feature that was being exploited.

April 14, 2022|Rapid7, a cybersecurity company, published a blog post detailing the vulnerability.

April 18, 2022|The vulnerability was published on the National Vulnerability Database (NVD).

April 19, 2022|A video was posted on YouTube demonstrating how to exploit the vulnerability using Metasploit, a penetration testing software.

April 21, 2022|Packet Storm, a network security community, published a Metasploit module that exploits the "custom script" feature of ADSelfService Plus.

October 2022|CVE-2022-47966 was discovered by Khoadha of Viettel Cyber Security and patched for the affected products.

January 10, 2023|ManageEngine released a security advisory for this issue.

January 18, 2023|The vulnerability was published on NVD.
Researchers at >Horizon3ai released a technical deep dive and a proof of concept (PoC) for this issue.

January 19, 2023|Horizon.ai released an in-depth technical overview of the CVE-2022-47966 alongside the PoC exploit for it. Simultaneously, Rapid7 researchers reported several related compromises observed since at least January 17.

January 2023|Multiple nation-state advanced persistent threat (APT) actors exploited CVE-2022-47966 to access an organization’s web server hosting the public-facing application, Zoho ManageEngine ServiceDesk Plus.

February 1, 2023|Rapid7 provided a detailed description of the vulnerability.

March 8, 2023|CISA added CVE-2022-28810 to KEV.

March 15, 2023|GreyNoise publishes tags for both CVEs.

September 7, 2023|CISA, the Federal Bureau of Investigation (FBI), and the Cyber National Mission Force (CNMF) identified the presence of indicators of compromise (IOCs) at an Aeronautical Sector organization.

`4b:[] 29:{"id":"28b3ae4313b7c473","slug":null,"title":"CVE-2022-28810 / CVE-2022-47966 Timeline","thumbnail":"dc0252231f6cc6c6ae244e329327b1c50323d850c353496643beb8a1e54f7ff1","access_level":"public","create_time":"$D2023-12-07T21:26:49.069Z","update_time":"$D2023-12-08T14:35:46.099Z","view_time":null,"first_public_time":"$D2023-12-07T21:26:49.069Z","has_unpublished_edits":null,"fork":{"id":"1da9c9e2566e8dd2","slug":null,"title":"CVE-2023-34362 Timeline","owner":{"id":"a057189879ac619e","login":"gt3","name":"gt3"}},"stars":0,"starred":false,"owner":{"type":"team","id":"a057189879ac619e","login":"gt3","name":"gt3","avatar_url":"https://avatars-next.observableusercontent.com/f06fcadbcf5f36010cec5394517783665ab5c340aae59da0de9cae939e6aae4c","tier":"starter_2024","bio":"","followed_by_you":false,"follows_you":false},"version":527,"publish_version":null,"role":null,"authored":false,"authors":[{"type":"individual","id":"39f226b7b0caaaf7","login":"glennt","name":"Glenn Thorpe","avatar_url":"https://avatars-next.observableusercontent.com/dc7996fea1c4fdbecf7e9a9ecfc2a27d4b2cc0bd57a338f84f4fcf6953c40420","tier":null,"bio":"","followed_by_you":false,"follows_you":false}],"members":[{"type":"individual","id":"39f226b7b0caaaf7","login":"glennt","name":"Glenn Thorpe","avatar_url":"https://avatars-next.observableusercontent.com/dc7996fea1c4fdbecf7e9a9ecfc2a27d4b2cc0bd57a338f84f4fcf6953c40420","tier":null,"role":"editor"},{"type":"team","id":"a057189879ac619e","login":"gt3","name":"gt3","avatar_url":"https://avatars-next.observableusercontent.com/f06fcadbcf5f36010cec5394517783665ab5c340aae59da0de9cae939e6aae4c","tier":"starter_2024","role":"editor"}],"comments":[],"custom_thumbnail":false,"trashed":false,"lapsed":null,"subscribed":null,"forks":2,"collection":null,"type":"notebook","body":{"titling":"auto","title":"CVE-2022-28810 / CVE-2022-47966 Timeline","cells":[{"id":60,"value":"$49","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","tool":"$undefined","providerMetadata":"$undefined","attachments":"$undefined","output":"$undefined","database":"$undefined"},{"id":411,"value":"tline = eventsParsed\n .filter((d) => d.date != \"\")\n .map((d) => ({\n date: d.date,\n unixTime: Math.floor(new Date(d.date).getTime() / 1000),\n sentence: d.sentence\n }))","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","tool":"$undefined","providerMetadata":"$undefined","attachments":"$undefined","output":"$undefined","database":"$undefined"},{"id":440,"value":"eventsParsed = d3.dsvFormat(\"|\").parse(events)","pinned":true,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","tool":"$undefined","providerMetadata":"$undefined","attachments":"$undefined","output":"$undefined","database":"$undefined"},{"id":457,"value":"title = \"CVE-2022-28810 / CVE-2022-47966 Timeline\"","pinned":true,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","tool":"$undefined","providerMetadata":"$undefined","attachments":"$undefined","output":"$undefined","database":"$undefined"},{"id":426,"value":"$4a","pinned":true,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","tool":"$undefined","providerMetadata":"$undefined","attachments":"$undefined","output":"$undefined","database":"$undefined"},{"id":405,"value":"function parseTableData(table) {\n const data = [];\n table.querySelectorAll(\"tr\").forEach((row, i) => {\n data.push(row.innerText.split(/[\\t\\n]/g));\n });\n\n const formattedData = data.reduce((accumulator, row, i) => {\n if (i == 0) {\n accumulator.properties = row;\n } else {\n const rowObject = {};\n accumulator.properties.forEach((key, i) => {\n rowObject[key] = row[i];\n });\n accumulator.push(rowObject);\n }\n return accumulator;\n }, []);\n return formattedData;\n}\n","pinned":false,"hidden":false,"mode":"ojs","author":"$undefined","summary":"$undefined","tool":"$undefined","providerMetadata":"$undefined","attachments":"$undefined","output":"$undefined","database":"$undefined"}],"files":"$W4b","stdlib":"1"}} 24:null