{"id":"CVE-2023-52096","aliases":["EUVD-2023-56770","GHSA-5798-fpq9-x4vx"],"status":"published","title":"SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in...","description":"SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00616,"percentile":0.49797,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-89"],"published":"2023-12-26T00:00:00Z","modified":"2026-10-28T02:30:29Z","products":[{"vendor":"steve-community","product":"ocpp-jaxb"}],"references":[{"url":"https://github.com/steve-community/steve/issues/1292","tags":["x_transferred","Exploit","Issue Tracking","Vendor Advisory","report"]},{"url":"https://github.com/steve-community/ocpp-jaxb/issues/13","tags":["x_transferred","Exploit","Issue Tracking","report"]},{"url":"https://github.com/steve-community/ocpp-jaxb/compare/0.0.7...0.0.8","tags":["x_transferred","Product","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52096","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5798-fpq9-x4vx"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52096.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-52096","description":"SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.","status":"published","published":"2023-12-26T00:00:00Z","modified":"2024-08-02T22:48:12.513Z","updated_at":"2026-11-02T14:35:18.16233Z"}],"euvd":[{"id":"EUVD-2023-56770","description":"SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.","status":"published","published":"2023-12-26T00:00:00Z","modified":"2024-08-02T22:48:12Z","updated_at":"2026-11-03T03:26:07.206777Z"}],"ghsa":[{"id":"GHSA-5798-fpq9-x4vx","title":"SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in...","description":"SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.","status":"published","published":"2023-12-27T00:30:26Z","modified":"2024-01-13T05:05:36Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:55:24.514817Z"}],"nvd":[{"id":"CVE-2023-52096","description":"SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.","status":"published","published":"2023-12-26T23:15:07.947Z","modified":"2026-06-17T06:42:03.747Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:08:57.117371Z"}],"osv":[{"id":"CVE-2023-52096","description":"SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records.","status":"published","published":"2023-12-26T00:00:00Z","modified":"2026-10-28T02:30:29.994268178Z","updated_at":"2026-11-02T15:44:35.245372Z"}]}}