{"metadata": {"vulnerability": "CVE-2023-25002", "count": 32, "kinds": {"milestone": 5, "sighting": 11, "kev": 0, "other": 16}}, "data": [{"timestamp": "2023-02-01T00:00:00Z", "date_only": false, "value": "2023-02-01T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-25002", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-08T18:46:43Z", "date_only": false, "value": "2023-05-08T18:46:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4320", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "727082ed-06ca-4ff3-a7da-d6d80bf2e247", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV\nURL\uff1ahttps://github.com/nokn0wthing/CVE-2023-25002\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4320", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-05-10T11:03:01Z", "date_only": false, "value": "2023-05-10T11:03:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/8270", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "72185cee-e445-4dbd-8ed8-1d980816d84c", "content": "#exploit\n1.CVE-2023-20052:\nInformation leak vulnerability in the DMG file parser of ClamAV\nhttps://github.com/nokn0wthing/CVE-2023-25002\n\n2. Exploits for CVE-2023-27327, CVE-2023-27328\n(Parallels Desktop VM)\nhttps://github.com/kn32/parallels-plist-escape\n\n3. CVE-2023-28231:\nDHCP Server RCE (2008 R2 SP1 - Server 2019)\nhttps://github.com/glavstroy/CVE-2023-28231", "url": "https://t.me/CyberSecurityTechnologies/8270", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-06-27T00:00:00Z", "date_only": false, "value": "2023-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25002", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-06-27T00:00:00Z", "date_only": false, "value": "2023-06-27T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / autodesk", "record": "CVE-2023-25002", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-06-27T23:15:00Z", "date_only": false, "value": "2023-06-27T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-25002", "record": "GSD-2023-25002", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-06-27T23:15:09Z", "date_only": false, "value": "2023-06-27T23:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-P642-FWHV-JWMJ", "record": "GHSA-P642-FWHV-JWMJ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-06-27T23:15:09.590Z", "date_only": false, "value": "2023-06-27T23:15:09.590", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25002", "record": "FKIE_CVE-2023-25002", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-28T00:30:45Z", "date_only": false, "value": "2023-06-28T00:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-P642-FWHV-JWMJ", "record": "GHSA-P642-FWHV-JWMJ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-06-28T02:12:21Z", "date_only": false, "value": "2023-06-28T02:12:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/65591", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "7711ea2c-5d88-41c0-8e8f-fd0e899457d9", "content": "\u203c CVE-2023-25002 \u203c\n\nA maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/65591"}, {"timestamp": "2023-07-06T16:13:00Z", "date_only": false, "value": "2023-07-06T16:13Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-25002", "record": "GSD-2023-25002", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-07-11T22:00:00Z", "date_only": false, "value": "2023-07-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1728", "record": "WID-SEC-W-2023-1728", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2023-07-11T22:00:00Z", "date_only": false, "value": "2023-07-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1728", "record": "WID-SEC-W-2023-1728", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-07-11T22:00:00Z", "date_only": false, "value": "2023-07-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1728", "record": "WID-SEC-W-2023-1728", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-07-11T22:00:00Z", "date_only": false, "value": "2023-07-11T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1728", "record": "WID-SEC-W-2023-1728", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2023-07-12T18:59:04Z", "date_only": false, "value": "2023-07-12T18:59:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/daeCUX95O6ZDqcl0fr7xMzropW9nHK8k-upy-41VtmVTfc0", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "f4e99d2d-b404-4dd9-a4c0-0a2c0d56f417", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-12-13T01:20:40.634Z", "date_only": false, "value": "2023-12-13T01:20:40.634164Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-25002", "record": "GSD-2023-25002", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-04-02T00:59:20Z", "date_only": false, "value": "2024-04-02T00:59:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nPhrPfiXPUHAf58D5YpbTj99KkY4hNzkYP0rbZrOEVdw3Nc", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "be0da33e-02c2-4cd2-b681-3a843c1cfc3e", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-02T00:59:21Z", "date_only": false, "value": "2024-04-02T00:59:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/10664", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "08bf37f3-d0b4-4c0f-881a-220ba6a754fe", "content": "CVE-2023-20052\n\nCVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV\n\nhttps://github.com/nokn0wthing/CVE-2023-25002\n\nPrivate: @RAVE_CGF", "url": "https://t.me/LockBitRaasRansomware/10664", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-04-04T05:13:38Z", "date_only": false, "value": "2024-04-04T05:13:38Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-P642-FWHV-JWMJ", "record": "GHSA-P642-FWHV-JWMJ", "field": "modified", "linked_record": true}, {"timestamp": "2024-08-02T11:11:43.501Z", "date_only": false, "value": "2024-08-02T11:11:43.501Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-25002", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:55:21.152Z", "date_only": false, "value": "2024-08-15T17:55:21.152+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1728", "record": "WID-SEC-W-2023-1728", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2024-12-05T14:38:10.506Z", "date_only": false, "value": "2024-12-05T14:38:10.506379Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-25002", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-12-05T14:38:10.506Z", "date_only": false, "value": "2024-12-05T14:38:10.506379Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25002", "record": "FKIE_CVE-2023-25002", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2024-12-05T14:39:41.206Z", "date_only": false, "value": "2024-12-05T14:39:41.206Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-25002", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-12-05T14:39:41.206Z", "date_only": false, "value": "2024-12-05T14:39:41.206Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-25002", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T05:40:27.487Z", "date_only": false, "value": "2026-06-17T05:40:27.487", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25002", "record": "FKIE_CVE-2023-25002", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:00:33.266Z", "date_only": false, "value": "2026-07-29T12:00:33.266192Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12469", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "22b98c64-cc32-461a-a1e4-e96af106543b", "url": "https://t.me/CVEhub/12469"}, {"timestamp": "2026-07-30T00:00:57.995Z", "date_only": false, "value": "2026-07-30T00:00:57.995502Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12469", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "f84e8f75-4f12-4a8b-88b0-66c0dbdcf4ab", "url": "https://t.me/CVEhub/12469"}, {"timestamp": "2026-07-31T00:00:06.147Z", "date_only": false, "value": "2026-07-31T00:00:06.147405Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12469", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "d1e469c5-20ea-44be-b921-434a0719f44a", "url": "https://t.me/CVEhub/12469", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T17:00:20.198Z", "date_only": false, "value": "2026-09-01T17:00:20.198303Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/6839", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "c2f55cc1-8e36-417c-80f3-95e7d3489991", "url": "https://t.me/cissp/6839"}, {"timestamp": "2026-09-10T00:00:08.391Z", "date_only": false, "value": "2026-09-10T00:00:08.391578Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/6839", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "e4a657cc-a122-4c8c-b7d7-8aac7f559501", "url": "https://t.me/cissp/6839", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-09T16:53:00.604Z", "anchors": {"origin": {"timestamp": "2023-06-27T00:00:00Z", "date_only": false, "value": "2023-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25002", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-06-27T00:00:00Z", "date_only": false, "value": "2023-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25002", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-05-08T18:46:43Z", "date_only": false, "value": "2023-05-08T18:46:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4320", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "727082ed-06ca-4ff3-a7da-d6d80bf2e247", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV\nURL\uff1ahttps://github.com/nokn0wthing/CVE-2023-25002\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4320", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": -4252397.0, "hours": -1181.221388888889, "days": -49.21755787037037, "min_seconds": -4338797.0, "max_seconds": -4252397.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2023-06-27T00:00:00Z", "date_only": false, "value": "2023-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25002", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-05-08T18:46:43Z", "date_only": false, "value": "2023-05-08T18:46:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4320", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "727082ed-06ca-4ff3-a7da-d6d80bf2e247", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV\nURL\uff1ahttps://github.com/nokn0wthing/CVE-2023-25002\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4320", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 106419180.604004, "hours": 29560.88350111222, "days": 1231.7034792130091, "min_seconds": 106332780.604004, "max_seconds": 106419180.604004, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-06-27T00:00:00Z", "date_only": false, "value": "2023-06-27T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25002", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T16:53:00.604Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 110671577.604004, "hours": 30742.10489000111, "days": 1280.9210370833796, "min_seconds": 110671577.604004, "max_seconds": 110671577.604004, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-05-08T18:46:43Z", "date_only": false, "value": "2023-05-08T18:46:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4320", "record": "CVE-2023-25002", "field": "creation_timestamp", "uuid": "727082ed-06ca-4ff3-a7da-d6d80bf2e247", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-20052, information leak vulnerability in the DMG file parser of ClamAV\nURL\uff1ahttps://github.com/nokn0wthing/CVE-2023-25002\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4320", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T16:53:00.604Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}