{"metadata": {"vulnerability": "CVE-2023-2825", "count": 101, "kinds": {"milestone": 8, "sighting": 57, "kev": 11, "other": 25}}, "data": [{"timestamp": "2023-05-20T00:00:00Z", "date_only": false, "value": "2023-05-20T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-2825", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-23T22:00:00Z", "date_only": false, "value": "2023-05-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1290", "record": "WID-SEC-W-2023-1290", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-05-23T22:00:00Z", "date_only": false, "value": "2023-05-23T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1290", "record": "WID-SEC-W-2023-1290", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-05-23T22:00:00Z", "date_only": false, "value": "2023-05-23T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1290", "record": "WID-SEC-W-2023-1290", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0406", "record": "CERTFR-2023-AVI-0406", "field": "last_revision_date"}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0406", "record": "CERTFR-2023-AVI-0406", "field": "initial_release_date"}, {"timestamp": "2023-05-24T00:00:00Z", "date_only": false, "value": "2023-05-24T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0406", "record": "CERTFR-2023-AVI-0406", "field": "revisions.0.revision_date"}, {"timestamp": "2023-05-24T19:32:15Z", "date_only": false, "value": "2023-05-24T19:32:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/alexmakus/5008", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "00daa7d6-ea43-4e05-94ce-a7d0894e16f1", "content": "GitLab has released an emergency security update, version 16.0.1, to address a maximum severity (CVSS v3.1 score: 10.0) path traversal flaw tracked as CVE-2023-2825.\n\n\u043d\u0435 \u0442\u0430\u043a \u0442\u043e \u0447\u0430\u0441\u0442\u043e \u0432\u0438\u0436\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 10.0 \n\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2825\n\nhttps://about.gitlab.com/releases/2023/05/23/critical-security-release-gitlab-16-0-1-released/", "url": "https://t.me/alexmakus/5008"}, {"timestamp": "2023-05-24T20:51:37Z", "date_only": false, "value": "2023-05-24T20:51:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/16751", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "bf29eefe-e308-4952-8c2c-6407be610b04", "content": "Latest news and stories from BleepingComputer.com\nGitLab 'strongly recommends' patching max severity flaw ASAP\n\nGitLab has released an emergency security update, version 16.0.1, to address a maximum severity (CVSS v3.1 score: 10.0) path traversal flaw tracked as CVE-2023-2825. [...]", "url": "https://t.me/BleepingComputer/16751"}, {"timestamp": "2023-05-24T21:02:35Z", "date_only": false, "value": "2023-05-24T21:02:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BleepingComputer/16758", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "5c79604e-8e2c-4f52-97e8-93d73126afc9", "content": "\u200aGitLab 'strongly recommends' patching max severity flaw ASAP\n\nGitLab has released an emergency security update, version 16.0.1, to address a maximum severity (CVSS v3.1 score: 10.0) path traversal flaw tracked as CVE-2023-2825. [...]\n\nhttps://www.bleepingcomputer.com/news/security/gitlab-strongly-recommends-patching-max-severity-flaw-asap/", "url": "https://t.me/BleepingComputer/16758"}, {"timestamp": "2023-05-25T14:26:59Z", "date_only": false, "value": "2023-05-25T14:26:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/49995", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "3aff0498-44e5-4939-be0e-203237b2fe0f", "content": "GitLab Security Update Patches Critical Vulnerability\nhttps://www.securityweek.com/gitlab-security-update-patches-critical-vulnerability/\n\nGitLab CE/EE version 16.0.1 patches a critical arbitrary file read vulnerability tracked as CVE-2023-2825.\nThe post GitLab Security Update Patches Critical Vulnerability (https://www.securityweek.com/gitlab-security-update-patches-critical-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/49995"}, {"timestamp": "2023-05-25T14:40:15Z", "date_only": false, "value": "2023-05-25T14:40:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BitLenta/15331", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "f231e7bd-4a42-43f9-a32b-4e69ace6ad81", "content": "#news GitLab \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0441\u0440\u043e\u0447\u043d\u043e \u043f\u0430\u0442\u0447\u0438\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c. \u0412\u0441\u0435\u0433\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u043f\u043e CVSS \u2013 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u0438\u0437 10. \u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 GitLab Community Edition \u0438 Enterprise Edition \u0432\u0435\u0440\u0441\u0438\u0438 16.0.0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 CVE-2023-2825 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u0430\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0427\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u0438 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0438 \u0442\u043e\u043a\u0435\u043d\u0430\u043c\u0438, \u0438 \u043f\u0440\u043e\u0447\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438. \u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0440\u0435\u043f\u044b, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0435\u0441\u0442\u044c \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043f\u044f\u0442\u044c \u0433\u0440\u0443\u043f\u043f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u043a\u0430\u043a GitLab \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u2013 \u043d\u0430\u043a\u0430\u0442\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043d\u0430\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u0441 \u044d\u0442\u0438\u043c \u043d\u0435 \u043c\u0435\u0434\u043b\u0438\u0442\u044c. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043a\u043e\u043d\u0446\u043e\u0432, \u043d\u0435 \u043a\u0430\u0436\u0434\u044b\u0439 \u0434\u0435\u043d\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0431\u0438\u0432\u0430\u0435\u0442 \u0434\u0435\u0441\u044f\u0442\u043e\u0447\u043a\u0443 \u043f\u043e CVSS.\n/tomhunter", "url": "https://t.me/BitLenta/15331"}, {"timestamp": "2023-05-25T15:05:06Z", "date_only": false, "value": "2023-05-25T15:05:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4421", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "cf90867a-69fe-4c5c-9ce8-cc9cb466d768", "content": "GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435  \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS v3.1: 10,0), \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2023-2825.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c pwnie, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 HackOne Bug Bounty.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 GitLab Community Edition (CE) \u0438 Enterprise Edition (EE) \u0432\u0435\u0440\u0441\u0438\u0438 16.0.0, \u043d\u043e \u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0441\u0442\u0430\u0440\u0448\u0435 \u043d\u0435\u0435. \u0412 \u0441\u0438\u043b\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438 \u0441\u0440\u043e\u043a\u043e\u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0432\u0435\u043d\u0434\u043e\u0440 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u0435 (\u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0432 \u043f\u044f\u0442\u0438 \u0433\u0440\u0443\u043f\u043f\u0430\u0445).\n\n\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\u00a0CVE-2023-2825\u00a0\u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043e\u0434 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u041f\u041e, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0442\u043e\u043a\u0435\u043d\u044b, \u0444\u0430\u0439\u043b\u044b \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043b\u0438\u0447\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\nGitLab \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u0442\u043b\u0430\u0433\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0430 \u0434\u043b\u044f GitLab Runner\u00a0 - \u0437\u0434\u0435\u0441\u044c.\n\n\u0421\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0438\u043c \u0444\u0430\u043a\u0442\u043e\u0440\u043e\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0441 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u0447\u0442\u043e \u043d\u0435 \u0432\u0441\u0435\u0433\u0434\u0430 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 GitHub.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c GitLab 16.0.0 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 16.0.1, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a.\u00a0\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439.", "url": "https://t.me/true_secator/4421"}, {"timestamp": "2023-05-25T18:15:16Z", "date_only": false, "value": "2023-05-25T18:15:16.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/KZzQm2YE4rpEt8NA4p0fWCKf8IGc9MwzLO8fPh-VA8fmJIs", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "b46c9604-056f-4e58-afe0-76e825d62b3a"}, {"timestamp": "2023-05-25T18:39:44Z", "date_only": false, "value": "2023-05-25T18:39:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xakep_ru/14096", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "0cf431f4-d105-4621-bcb1-d5124d64f374", "content": "GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 GitLab \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0440\u043e\u0447\u043d\u043e\u0439 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0432\u0435\u0440\u0441\u0438\u044f 16.0.1) \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043d\u0430\u0431\u0440\u0430\u0432\u0448\u0435\u0439 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVSS. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-2825 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043e\u0434 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u041f\u041e, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0442\u043e\u043a\u0435\u043d\u044b, \u0444\u0430\u0439\u043b\u044b \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435.\n\nhttps://xakep.ru/2023/05/25/gitlab-bug/", "url": "https://t.me/xakep_ru/14096"}, {"timestamp": "2023-05-25T22:00:00Z", "date_only": false, "value": "2023-05-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1290", "record": "WID-SEC-W-2023-1290", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-05-26T00:00:00Z", "date_only": true, "value": "2023-05-26", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-41401", "record": "CNVD-2023-41401", "field": "openTime"}, {"timestamp": "2023-05-26T00:00:00Z", "date_only": false, "value": "2023-05-26T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-2825", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-05-26T00:00:00Z", "date_only": true, "value": "2023-05-26", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-41401", "record": "CNVD-2023-41401", "field": "submitTime"}, {"timestamp": "2023-05-26T00:00:00Z", "date_only": false, "value": "2023-05-26T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "CVE-2023-2825", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-05-26T05:13:23Z", "date_only": false, "value": "2023-05-26T05:13:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/ptswarm/174", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "a229dc48-2a64-4882-99e7-133c0f83e328", "content": "GitLab Arbitrary File Read (CVE-2023-2825) Analysis \n\n\ud83d\udc64 by Sonny\n\nFor the unaware, GitLab is a widely used, enterprise-grade web application for managing source code repositories at scale. In this blog post author will be discussing a fresh vulnerability that has been issued an advisory by Gitlab with a CVSS score of 10.0 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N).\n\nAn issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.\n\n\ud83d\udcdd Contents:\n\u25cf Setting up the target environment \n\u25cf Reproducing the bug\n\u25cf But Why?\n\u25cf How impactful is this vulnerability?\n\u25cf Conclusion\n\nhttps://labs.watchtowr.com/gitlab-arbitrary-file-read-gitlab-cve-2023-2825-analysis/", "url": "https://t.me/ptswarm/174"}, {"timestamp": "2023-05-26T10:12:27Z", "date_only": false, "value": "2023-05-26T10:12:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/tech_b0lt_Genona/3747", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "53fc948e-8678-402a-92ab-db46951cf5de", "content": "\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u0443 GitLab \u0441\u043b\u0443\u0447\u0438\u043b\u043e\u0441\u044c \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0437-\u0437\u0430 \u043e\u0447\u0435\u043d\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 10 \u0438\u0437 10\n\nAn issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project\n\nGitLab Critical Security Release: 16.0.1\nhttps://about.gitlab.com/releases/2023/05/23/critical-security-release-gitlab-16-0-1-released/\n\n\u0418 \u0432\u043e\u0442 \u0443\u0436\u0435 \u0435\u0441\u0442\u044c PoC\n\nCVE-2023-2825 ANALYSIS AND EXPLOIT\nhttps://occamsec.com/exploit-for-cve-2023-2825/", "url": "https://t.me/tech_b0lt_Genona/3747"}, {"timestamp": "2023-05-26T10:30:14Z", "date_only": false, "value": "2023-05-26T10:30:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/purple_medved/26", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "5e674004-82ca-4803-923e-15e10f8ac612", "content": "\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u043d\u0435\u0434\u0435\u043b\u0435, Gitlab \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u043e\u0439 \u0440\u0430\u0437 \u0432\u044b\u0440\u0432\u0430\u043b\u0441\u044f \u0432 \u043b\u0438\u0434\u0435\u0440\u044b \u043f\u043e \u0443\u0440\u043e\u0432\u043d\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0440\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e CVE-2023-2825 \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 GitLab Community \u0438 Enterprise Edition \u0432\u0435\u0440\u0441\u0438\u0438 16.0.0.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u0443\u0440\u043e\u0432\u043d\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 - 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u0443 CVSS3.1 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u043f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u0444\u0430\u0439\u043b\u043e\u0432, \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432 Issues \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u043f\u0440\u043e\u0435\u043a\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043f\u044f\u0442\u044c\u044e \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438. \n\u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044e\u0442\u0441\u044f \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e /var/opt/gitlab/gitlab-rails/uploads/@hashed/////, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u0443\u044e \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 11 \u0433\u0440\u0443\u043f\u043f\u0430\u043c\u0438 \u0438\u043b\u0438 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e.\n\n\u2699\ufe0fPOC: https://github.com/Occamsec/CVE-2023-2825\n\u2705 \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438: \u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 ASAP.\n\n#CVE-2023-2825 #GitLab #path_traversal", "url": "https://t.me/purple_medved/26"}, {"timestamp": "2023-05-26T13:20:27Z", "date_only": false, "value": "2023-05-26T13:20:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/J-kUi9Fe7-JZSFHIIrvstGc3U2hlq7FmTWWR73dTfdW1dUc", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "7d4d34ff-bc98-4634-b39c-e9f04eea8044"}, {"timestamp": "2023-05-26T13:55:18Z", "date_only": false, "value": "2023-05-26T13:55:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4425", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "9e87bed4-548a-40c1-9387-8bd1ca48df04", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aGitLab CVE-2023-2825 PoC. This PoC leverages a path traversal vulnerability to retrieve the /etc/passwd file from a system running GitLab 16.0.0.\nURL\uff1ahttps://github.com/Rishipatidar/CVE-2023-30212-POC-DOCKER-FILE\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4425"}, {"timestamp": "2023-05-26T13:55:26Z", "date_only": false, "value": "2023-05-26T13:55:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4424", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "3b749142-5775-48e2-ac90-d55a98d85629", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aGitLab CVE-2023-2825 Checker\nURL\uff1ahttps://github.com/Occamsec/CVE-2023-2825\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4424"}, {"timestamp": "2023-05-26T16:18:58Z", "date_only": false, "value": "2023-05-26T16:18:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Netzwerksicherheit/163", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "c8bc1abc-bbad-475b-9202-c93e1ec0cb0c", "content": "Kritische Sicherheitsl\u00fccke mit H\u00f6chstwertung bedroht GitLab\n\nEs gibt eine wichtiges Sicherheitsupdate f\u00fcr die Versionsverwaltung GitLab. Entwickler sollten jetzt reagieren. \n\nEntwickler, die bei der Softwareerstellung die Versionsverwaltung GitLab einsetzen, sollten die Software zeitnah auf den aktuellen Stand bringen. Andernfalls k\u00f6nnten Angreifer unbefugt auf Daten zugreifen.\n\nIn einer Warnmeldung raten die GitLab-Entwickler das Sicherheitsupdate so schnell wie m\u00f6glich zu installieren. Ob bereits Attacken laufen, ist derzeit nicht bekannt. Die Sicherheitsl\u00fccke mit maximaler CVSS-Einstufung 10 von 10 (CVE-2023-2825 \"kritisch\") soll ausschlie\u00dflich die Version 16.0.0 von GitLab Community Edition (CE) und Enterprise Edition (EE) betreffen. J\u00fcngere Ausgaben sollen davon nicht betroffen sein.\nDatenleak-L\u00fccke\n\nDie Voraussetzung f\u00fcr Attacken ist, dass ein Anhang in einem \u00f6ffentlichen Projekt vorhanden ist, der in mindestens f\u00fcnf Gruppen verschachtelt ist. In einem solchen Fall soll ein Angreifer ohne Authentifizierung an der Path-Traversal-Schwachstelle ansetzen k\u00f6nnen. Wie eine Attacke konkret ablaufen k\u00f6nnte, ist derzeit nicht bekannt. Bei erfolgreichen Angriffen k\u00f6nnen unter anderem Softwarecode und Zugangsdaten leaken.\n\nDie Entwickler geben an, das Sicherheitsproblem in der Version 16.0.1 gel\u00f6st zu haben.\n\nQuelle\n\n_\nIT Sicherheit @Netzwerksicherheit\n...IT f\u00fcr Nutzeraufkl\u00e4rung und -sicherheit", "url": "https://t.me/Netzwerksicherheit/163"}, {"timestamp": "2023-05-26T17:58:27Z", "date_only": false, "value": "2023-05-26T17:58:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3064", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "c8fa352c-33f4-4f81-946e-a3d4d3310024", "content": "Tools - Hackers Factory \n\nJira-Scan\n\nProvide a list of websites to test with out the http or https and this will test each one for the SSRF vun.\n\nhttps://github.com/random-robbie/Jira-Scan\n\n#infosec #pentesting #bugbounty\n\ns3reverse\n\nThe format of various s3 buckets is convert in one format. for #bugbounty and security testing.\n\nhttps://github.com/hahwul/s3reverse\n\n#cybersecurity #infosec\n\nLogger++ \n\nA multithreaded logging extension for #BurpSuite. In addition to logging requests and responses from all Burp Suite tools, the extension allows advanced filters to be defined to highlight interesting entries or filter logs to only those which match the filter.\n\nhttps://github.com/nccgroup/LoggerPlusPlus\n\n#infosec #pentesting #bugbounty\n\nTop25 Parameter \n\nFor basic researches, top 25 vulnerability parameters that can be used in automation tools or manual #recon.\n\nhttps://github.com/lutfumertceylan/top25-parameter\n\n#infosec #pentesting #bugbounty\n\nLOOBins\n\nLiving Off the Orchard: macOS Binaries (LOOBins) is designed to provide detailed information on various built-in \"living off the land\" macOS binaries and how they can be used by threat actors for malicious purposes.\n\nhttps://github.com/infosecB/LOOBins\n\nWeb:\nhttps://www.loobins.io/\n\n#infosec #blueteam\n\ncodeexplain.nvim\n\nA nvim plugin Powered by GPT4ALL for Real-time Code Explanation and Vulnerability Detection (no internet necessary).\n\nhttps://github.com/mthbernardes/codeexplain.nvim\n\n#cybersecurity #infosec\n\nCVE-2020-0683\n\nOriginal Poc sent to MSRC. Assigned to CVE-2020-0683 - Windows Installer Elevation of Privilege.\n\nhttps://github.com/padovah4ck/CVE-2020-0683\n\n#cve #cybersecurity #infosec\n\nCVE-2023-2825\n\nOn May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition (CE) and Enterprise Edition (EE) version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It was discovered by pwnie on HackerOne through the bug bounty program.\n\nhttps://github.com/Occamsec/CVE-2023-2825\n\n#cve #cybersecurity #infosec\n\n\ud83d\ude80 AllForOne\n\nThis repository contains a Python script that allows bug bounty hunters and security researchers to collect all Nuclei YAML templates from various public repositories, helping to streamline the process of downloading multiple templates using just a single repository.\n\nhttps://github.com/AggressiveUser/AllForOne\n\n#infosec #pentesting #bugbounty\n\nCVE-2023-2732\n\nMStore API <= 3.9.2 - Authentication Bypass\n\nhttps://github.com/RandomRobbieBF/CVE-2023-2732\n\n#cve #cybersecurity #infosec\n\nCVE-2023-30145\n\nCamaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.\n\nhttps://github.com/paragbagul111/CVE-2023-30145\n\n#cve #cybersecurity #infosec\n\nWhatMail\n\nA command-line tool that analyzes the header of an email and provides detailed information about various fields.\n\nhttps://github.com/z0m31en7/WhatMail\n\n#OSINT #cybersecurity #infosec\n\nlibslub\n\nlibslub is a python library to examine the SLUB managements structures and object allocations (the Linux kernel heap implementation). It is currently designed for use with GDB but could easily be adapted to work with other debuggers.\n\nIt helps understanding SLUB internals and developing Linux kernel exploits.\n\nhttps://github.com/nccgroup/libslub\n\n#cybersecurity #infosec\n\nHidden Desktop BOF\n\nHidden Desktop (often referred to as HVNC) is a tool that allows operators to interact with a remote desktop session without the user knowing.\u00a0 The VNC protocol is not involved, but the result is a similar experience. This Cobalt Strike BOF implementation was created as an alternative to TinyNuke/forks that are written in C++.\n\nhttps://github.com/WKL-Sec/HiddenDesktop\n\n#infosec #pentesting #redteam\n\nBlackout \n\nKill anti-malware protected processes using BYOVD. leveraging gmer driver to effectively disabling or killing EDRs and AVs.\n\nhttps://github.com/ZeroMemoryEx/Blackout\n\n#infosec \n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/3064"}, {"timestamp": "2023-05-26T21:15:00Z", "date_only": false, "value": "2023-05-26T21:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-2825", "record": "UBUNTU-CVE-2023-2825", "field": "published"}, {"timestamp": "2023-05-26T21:15:00Z", "date_only": false, "value": "2023-05-26T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-2825", "record": "GSD-2023-2825", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-05-26T21:15:16Z", "date_only": false, "value": "2023-05-26T21:15:16Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X4JH-5C6X-H92V", "record": "GHSA-X4JH-5C6X-H92V", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-05-26T21:15:16.740Z", "date_only": false, "value": "2023-05-26T21:15:16.740", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2825", "record": "FKIE_CVE-2023-2825", "field": "published"}, {"timestamp": "2023-05-26T21:30:23Z", "date_only": false, "value": "2023-05-26T21:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X4JH-5C6X-H92V", "record": "GHSA-X4JH-5C6X-H92V", "field": "published"}, {"timestamp": "2023-05-27T12:37:01Z", "date_only": false, "value": "2023-05-27T12:37:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSecurityTechnologies/8371", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "9644e8a2-c875-4a3a-93f8-d35dcbaa1a9a", "content": "#exploit\n1. CVE-2023-2825:\nPath traversal vulnerability in GitLab 16.0.0\nhttps://github.com/Occamsec/CVE-2023-2825\n\n2. CVE-2023-28131:\nExpo Framework AuthSession Redirect Proxy redirect\nhttps://salt.security/blog/a-new-oauth-vulnerability-that-may-impact-hundreds-of-online-services", "url": "https://t.me/CyberSecurityTechnologies/8371"}, {"timestamp": "2023-05-27T16:18:43Z", "date_only": false, "value": "2023-05-27T16:18:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3066", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "742d5769-dc7a-490f-86d7-38ef248bedc6", "content": "Cybersecurity News - Hackers Factory\n\n\u200aSamsung ASLR Bypass Flaw Is Actively Exploited \u2013 Warns CISA\n\nhttps://latesthackingnews.com/2023/05/25/samsung-aslr-bypass-flaw-is-actively-exploited-warns-cisa/\n\n\u200aZyxel warns of critical vulnerabilities in firewall and VPN devices\n\nhttps://www.bleepingcomputer.com/news/security/zyxel-warns-of-critical-vulnerabilities-in-firewall-and-vpn-devices/\n\n\u200aWhat\u2019s a Double-Blind Password Strategy and When Should It Be Used\n\nhttps://www.bleepingcomputer.com/news/security/whats-a-double-blind-password-strategy-and-when-should-it-be-used/\n\n\u200aHow to improve sandbox effectiveness | Kaspersky official blog\n\nhttps://www.kaspersky.com/blog/sandbox-working-environment/48272/\n\n\u200aGoogle Introduces Mobile VRP For Its Android Apps\n\nhttps://latesthackingnews.com/2023/05/25/google-introduces-mobile-vrp-for-its-android-apps/\n\n\u200aNew Russian-linked CosmicEnergy malware targets industrial systems\n\nhttps://www.bleepingcomputer.com/news/security/new-russian-linked-cosmicenergy-malware-targets-industrial-systems/\n\n\u200aMicrosoft urges lawmakers to adopt new guidelines for responsible AI\n\nhttps://cyberscoop.com/microsoft-urges-lawmakers-to-adopt-new-guidelines-for-responsible-ai/\n\n\u200aExploiting the Sonos One Speaker Three Different Ways: A Pwn2Own Toronto Highlight\n\nhttps://www.thezdi.com/blog/2023/5/24/exploiting-the-sonos-one-speaker-three-different-ways-a-pwn2own-toronto-highlight\n\n\u200aD-Link fixes auth bypass and RCE flaws in D-View 8 software\n\nhttps://www.bleepingcomputer.com/news/security/d-link-fixes-auth-bypass-and-rce-flaws-in-d-view-8-software/\n\n\u200aMicrosoft 365 phishing attacks use encrypted RPMSG messages\n\nhttps://www.bleepingcomputer.com/news/security/microsoft-365-phishing-attacks-use-encrypted-rpmsg-messages/\n\n\u200aFrom Espionage to Theft: The Multi-Faceted APT Attacks on SMBs\n\nhttps://securityonline.info/from-espionage-to-theft-the-multi-faceted-apt-attacks-on-smbs/\n\n\u200aIZ1H9: The New Face of Mirai Botnet Threatening Linux Servers\n\nhttps://securityonline.info/iz1h9-the-new-face-of-mirai-botnet-threatening-linux-servers/\n\n\u200agoblob: fast enumeration tool for publicly exposed Azure Storage blobs\n\nhttps://securityonline.info/goblob-fast-enumeration-tool-for-publicly-exposed-azure-storage-blobs/\n\n\u200aPoC Exploit Released for GitLab CVE-2023-2825 Vulnerability\n\nhttps://securityonline.info/poc-exploit-released-for-gitlab-cve-2023-2825-vulnerability/\n\n\u200aPredator: Looking under the hood of Intellexa\u2019s Android spyware\n\nhttps://www.bleepingcomputer.com/news/security/predator-looking-under-the-hood-of-intellexas-android-spyware/\n\n\u200aTransatlantic Cable podcast episode 300 kicks off with Meta\u2019s record fine, ChatGPT and Neeva closure. | Kaspersky official blog\n\nhttps://www.kaspersky.com/blog/transatlantic-cable-podcast-300/48276/\n\n\u200aWindows 11 finally gets a 'never combine taskbar buttons' mode\n\nhttps://www.bleepingcomputer.com/news/microsoft/windows-11-finally-gets-a-never-combine-taskbar-buttons-mode/\n\n\u200aChina-linked APT Volt Typhoon targets critical infrastructure organizations\n\nhttps://securityaffairs.com/146649/hacking/china-linked-apt-volt-typhoon.html\n\n\u200aGoogle Trust Services ACME API available to all users at no cost\n\nhttp://security.googleblog.com/2023/05/google-trust-services-acme-api_0503894189.html\n\n\u200aRooting with root cause: finding a variant of a Project Zero bug\n\nhttps://github.blog/2023-05-25-rooting-with-root-cause-finding-a-variant-of-a-project-zero-bug/\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "url": "https://t.me/dilagrafie/3066"}, {"timestamp": "2023-05-28T10:07:43Z", "date_only": false, "value": "2023-05-28T10:07:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/arvinclub1/253", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "97fe55bd-6cc7-4c60-aa29-db7dffa0a417", "content": "https://github.com/Occamsec/CVE-2023-2825", "url": "https://t.me/arvinclub1/253"}, {"timestamp": "2023-05-28T11:18:48Z", "date_only": false, "value": "2023-05-28T11:18:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1544", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "93542324-6f4a-475f-8731-433256506f38", "content": "CVE-2023-2825\n\nGitLab - Community Edition\\Enterprise Edition\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0447\u0435\u0440\u0435\u0437 \u043e\u0448\u0438\u0431\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438.\n\nPOC Exploit\n\n#gitlab", "url": "https://t.me/proxy_bar/1544"}, {"timestamp": "2023-05-28T13:46:27Z", "date_only": false, "value": "2023-05-28T13:46:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/3571", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "863d069d-2943-474f-9e90-7717488fc63e", "content": "Path traversal flaws are an all-too-common occurrence. These vulnerabilities, if exploited, allow attackers to access files and directories outside of the intended scope. Among the recent discoveries, one notable vulnerability is CVE-2023-2825, which exposes a path traversal flaw in GitLab version 16.0.0. \n\nhttps://system32.ink/exploring-the-depths-unveiling-cve-2023-2825-path-traversal-vulnerability-in-gitlab-16-0-0/", "url": "https://t.me/crackcodes/3571"}, {"timestamp": "2023-05-28T14:54:24Z", "date_only": false, "value": "2023-05-28T14:54:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/he35_PuHfXBWq5P_l8krEvOTKJVHcCfkPtqWdREiZ2kzqA", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "22aaed34-726c-45b5-ba79-b0734aef4dc1"}, {"timestamp": "2023-05-29T03:52:00Z", "date_only": false, "value": "2023-05-29T03:52Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-2825", "record": "GSD-2023-2825", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-30T08:27:42Z", "date_only": false, "value": "2023-05-30T08:27:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4443", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "22e00e2b-4901-4aa8-a681-04db3e4f960e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-2825 list\nURL\uff1ahttps://github.com/yuimarudev/CVE-2023-2825\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4443"}, {"timestamp": "2023-05-31T12:48:04Z", "date_only": false, "value": "2023-05-31T12:48:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/11061", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "936abf3b-a9f5-4c13-b805-7d1c0f7328e9", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 CVE-2023-2825 (analysis and exploit).\n\nhttps://occamsec.com/exploit-for-cve-2023-2825/", "url": "https://t.me/cKure/11061"}, {"timestamp": "2023-06-07T11:25:49Z", "date_only": false, "value": "2023-06-07T11:25:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/gitlab_authenticated_subgroups_file_read.rb", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "845db273-f3ab-47d7-8f2d-b20ee514e51e", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/gitlab_authenticated_subgroups_file_read.rb"}, {"timestamp": "2023-06-28T22:00:00Z", "date_only": false, "value": "2023-06-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1290", "record": "WID-SEC-W-2023-1290", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-06-28T22:00:00Z", "date_only": false, "value": "2023-06-28T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1290", "record": "WID-SEC-W-2023-1290", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-06-28T22:00:00Z", "date_only": false, "value": "2023-06-28T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1290", "record": "WID-SEC-W-2023-1290", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-07-24T09:22:05Z", "date_only": false, "value": "2023-07-24T09:22:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zdudhVLLDqfFrpQfIgVPQqJT76TnyKYVlJSZ720zIlJ8G5A", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "5f80b3ab-fb7d-490b-b06d-d2b45c412314"}, {"timestamp": "2023-08-07T22:29:01Z", "date_only": false, "value": "2023-08-07T22:29:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/798", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "49008957-5f6e-44f1-ae9f-57ad578b8e00", "content": "CVE-2023-2825 : GitLab 16.0.0 - Unauthenticated  Arbitrary File Read \nBlog : https://labs.watchtowr.com/gitlab-arbitrary-file-read-gitlab-cve-2023-2825-analysis/", "url": "https://t.me/MrVGunz/798"}, {"timestamp": "2023-12-13T01:20:31.710Z", "date_only": false, "value": "2023-12-13T01:20:31.710254Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-2825", "record": "GSD-2023-2825", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-06T11:07:04.975Z", "date_only": false, "value": "2024-03-06T11:07:04.975Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2023-2825", "record": "BIT-GITLAB-2023-2825", "field": "published"}, {"timestamp": "2024-04-04T04:21:35Z", "date_only": false, "value": "2024-04-04T04:21:35Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X4JH-5C6X-H92V", "record": "GHSA-X4JH-5C6X-H92V", "field": "modified"}, {"timestamp": "2024-08-02T06:33:05.812Z", "date_only": false, "value": "2024-08-02T06:33:05.812Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-2825", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:51:21.756Z", "date_only": false, "value": "2024-08-15T17:51:21.756+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-1290", "record": "WID-SEC-W-2023-1290", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-15T15:45:06.932Z", "date_only": false, "value": "2025-01-15T15:45:06.932561Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-2825", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-15T15:45:06.932Z", "date_only": false, "value": "2025-01-15T15:45:06.932561Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2825", "record": "FKIE_CVE-2023-2825", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-15T15:45:18.054Z", "date_only": false, "value": "2025-01-15T15:45:18.054Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-2825", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-15T15:45:18.054Z", "date_only": false, "value": "2025-01-15T15:45:18.054Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-2825", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-15T15:55:04Z", "date_only": false, "value": "2025-01-15T15:55:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1778", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "bb5fcf12-b2ca-426b-b4cd-72c694f966f6", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-2825\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a path traversal vulnerability to read arbitrary files on the server when an attachment exists in a public project nested within at least five groups.\n\ud83d\udccf Published: 2023-05-26T00:00:00\n\ud83d\udccf Modified: 2025-01-15T15:45:18.054Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/412371\n2. https://hackerone.com/reports/1994725\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-2825.json", "url": "https://t.me/DarkWebInformer_CVEAlerts/1778"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "94f5113e-305d-4961-baba-89d6b42c8b7a"}, {"timestamp": "2025-02-23T04:10:52Z", "date_only": false, "value": "2025-02-23T04:10:52.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "764fb940-364d-4643-a15c-17a964c764c5"}, {"timestamp": "2025-10-23T21:13:01Z", "date_only": false, "value": "2025-10-23T21:13:01.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "d84c79fd-afcc-41d7-9ef0-ea74a28df917"}, {"timestamp": "2025-10-24T05:01:18Z", "date_only": false, "value": "2025-10-24T05:01:18Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-2825", "record": "UBUNTU-CVE-2023-2825", "field": "modified"}, {"timestamp": "2026-05-18T03:00:06Z", "date_only": false, "value": "2026-05-18T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/eEkK6PVbdDfglsyujSuxBWIZjJpDuh84Njq8yhH-Zu1Cfr8", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "b4f279c7-fdf1-47d8-bd38-9bf2c7885cbc"}, {"timestamp": "2026-06-17T05:53:33.087Z", "date_only": false, "value": "2026-06-17T05:53:33.087", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-2825", "record": "FKIE_CVE-2023-2825", "field": "lastModified"}, {"timestamp": "2026-07-26T02:02:28.331Z", "date_only": false, "value": "2026-07-26T02:02:28.331431Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1414", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "6e2d3037-66ed-4fc7-a529-2b159abf80a0", "url": "https://t.me/EchelonEyes/1414"}, {"timestamp": "2026-07-26T07:01:38.004Z", "date_only": false, "value": "2026-07-26T07:01:38.004806Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1539", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "7e1dd923-c57c-4122-af85-b2f7ebd835e3", "url": "https://t.me/Positive_Technologies/1539"}, {"timestamp": "2026-07-27T00:01:05.045Z", "date_only": false, "value": "2026-07-27T00:01:05.045787Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1414", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "e57b557c-9710-4ff2-809d-d63c60b26459", "url": "https://t.me/EchelonEyes/1414"}, {"timestamp": "2026-07-27T00:01:29.020Z", "date_only": false, "value": "2026-07-27T00:01:29.020692Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1539", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "653d4d6c-6f22-4f32-b441-79e8d621f564", "url": "https://t.me/Positive_Technologies/1539"}, {"timestamp": "2026-07-28T00:00:08.166Z", "date_only": false, "value": "2026-07-28T00:00:08.166182Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/1414", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "0860ffee-dffe-4b06-9703-b93e07c7234a", "url": "https://t.me/EchelonEyes/1414"}, {"timestamp": "2026-07-28T19:00:05.131Z", "date_only": false, "value": "2026-07-28T19:00:05.131304Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1539", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "60c3b4fb-1dcd-48e9-91b7-4ccee19a65f4", "url": "https://t.me/Positive_Technologies/1539"}, {"timestamp": "2026-07-29T00:00:28.522Z", "date_only": false, "value": "2026-07-29T00:00:28.522352Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/1539", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "8ff91cbf-285b-4927-86ac-415cc9ed1412", "url": "https://t.me/Positive_Technologies/1539"}, {"timestamp": "2026-07-29T12:00:26.329Z", "date_only": false, "value": "2026-07-29T12:00:26.329625Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14403", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "fa492c24-7e6d-48bc-b6a5-588795907e1e", "url": "https://t.me/CVEhub/14403"}, {"timestamp": "2026-07-29T12:00:27.593Z", "date_only": false, "value": "2026-07-29T12:00:27.593444Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13999", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "d8f368ab-961f-4eea-b44a-c1bb4973ce2e", "url": "https://t.me/CVEhub/13999"}, {"timestamp": "2026-07-29T12:00:27.713Z", "date_only": false, "value": "2026-07-29T12:00:27.713887Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13884", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "967a7d6d-96b6-465e-ab36-ff523290cac4", "url": "https://t.me/CVEhub/13884"}, {"timestamp": "2026-07-29T12:00:29.781Z", "date_only": false, "value": "2026-07-29T12:00:29.781500Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13704", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "0d0b6803-a27e-4ca9-9113-2a2837ed7b58", "url": "https://t.me/CVEhub/13704"}, {"timestamp": "2026-07-30T00:00:48.708Z", "date_only": false, "value": "2026-07-30T00:00:48.708429Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14403", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "0b88e2b4-6c94-456d-8506-cbcd8891b325", "url": "https://t.me/CVEhub/14403"}, {"timestamp": "2026-07-30T00:00:51.466Z", "date_only": false, "value": "2026-07-30T00:00:51.466488Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13999", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "b00a0d7a-c3d0-47c0-86a1-40b659e6d1d4", "url": "https://t.me/CVEhub/13999"}, {"timestamp": "2026-07-30T00:00:51.701Z", "date_only": false, "value": "2026-07-30T00:00:51.701436Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13884", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "170e0665-f88a-43ed-bbf8-3cd7936a4331", "url": "https://t.me/CVEhub/13884"}, {"timestamp": "2026-07-30T00:00:53.524Z", "date_only": false, "value": "2026-07-30T00:00:53.524288Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13704", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "4ac650de-79c4-406f-8c13-815b90fc7922", "url": "https://t.me/CVEhub/13704"}, {"timestamp": "2026-07-31T00:00:23.272Z", "date_only": false, "value": "2026-07-31T00:00:23.272700Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13704", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "4aaccd26-b8d6-407b-a4c3-a5b85c5d18f3", "url": "https://t.me/CVEhub/13704"}, {"timestamp": "2026-07-31T00:00:24.655Z", "date_only": false, "value": "2026-07-31T00:00:24.655458Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13884", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "5ade8fc5-19c1-45c8-80e3-ca02cf710f66", "url": "https://t.me/CVEhub/13884"}, {"timestamp": "2026-07-31T00:00:24.857Z", "date_only": false, "value": "2026-07-31T00:00:24.857584Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13999", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "a01d0321-ae34-465f-9ca9-2f70cbdbce00", "url": "https://t.me/CVEhub/13999"}, {"timestamp": "2026-07-31T00:00:26.617Z", "date_only": false, "value": "2026-07-31T00:00:26.617784Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/14403", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "2d401572-6807-471d-b8c6-721ccb035193", "url": "https://t.me/CVEhub/14403"}, {"timestamp": "2026-08-02T00:00:00Z", "date_only": false, "value": "2026-08-02T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-2825", "field": "timestamps.asserted_at", "uuid": "67abd7e3-1cf3-498f-aa34-c267e5a383fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-02T00:00:00Z", "date_only": false, "value": "2026-08-02T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-2825", "field": "evidence.0.details.added_date", "uuid": "67abd7e3-1cf3-498f-aa34-c267e5a383fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-02T00:00:00Z", "date_only": false, "value": "2026-08-02T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-2825", "field": "timestamps.first_seen_at", "uuid": "67abd7e3-1cf3-498f-aa34-c267e5a383fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-02T00:00:00Z", "date_only": false, "value": "2026-08-02T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-2825", "field": "status.status_updated_at", "uuid": "67abd7e3-1cf3-498f-aa34-c267e5a383fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-02T17:01:11Z", "date_only": false, "value": "2026-08-02T17:01:11+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-2825", "field": "timestamps.asserted_at", "uuid": "eb647c19-687b-477a-90e2-2254d4fac732", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-02T17:01:11Z", "date_only": false, "value": "2026-08-02T17:01:11+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-2825", "field": "timestamps.first_seen_at", "uuid": "eb647c19-687b-477a-90e2-2254d4fac732", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-03T11:00:01Z", "date_only": false, "value": "2026-08-03T11:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-2825", "field": "timestamps.recorded_at", "uuid": "67abd7e3-1cf3-498f-aa34-c267e5a383fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-03T11:00:21.365Z", "date_only": false, "value": "2026-08-03T11:00:21.365994Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/67abd7e3-1cf3-498f-aa34-c267e5a383fb", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "cbb3e697-049b-4f44-b51a-cc4506d54771", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/67abd7e3-1cf3-498f-aa34-c267e5a383fb"}, {"timestamp": "2026-08-03T12:00:22.574Z", "date_only": false, "value": "2026-08-03T12:00:22.574034Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b8409ab4-0857-472b-ac3a-8f4f5242a54a", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "b01daa53-cd97-4b2c-b159-7b0a39661c90", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b8409ab4-0857-472b-ac3a-8f4f5242a54a"}, {"timestamp": "2026-08-04T01:00:26.931Z", "date_only": false, "value": "2026-08-04T01:00:26.931384Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ad604458-50b4-4eec-8348-10a0874ffaf2", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "518c5525-099a-4c95-84fa-3666c05f5f05", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ad604458-50b4-4eec-8348-10a0874ffaf2"}, {"timestamp": "2026-08-04T01:00:27.291Z", "date_only": false, "value": "2026-08-04T01:00:27.291710Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/eb647c19-687b-477a-90e2-2254d4fac732", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "82e99e65-f8e0-4369-8414-c6b22bb22eef", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/eb647c19-687b-477a-90e2-2254d4fac732"}, {"timestamp": "2026-08-08T10:49:48.698Z", "date_only": false, "value": "2026-08-08T10:49:48.698025Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-07)", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "d51655eb-ac1a-4408-a288-a18769574f47"}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": false, "value": "2026-08-21T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-2825", "field": "timestamps.last_seen_at", "uuid": "eb647c19-687b-477a-90e2-2254d4fac732", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": true, "value": "2026-08-21", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-2825", "field": "evidence.0.details.observation_date", "uuid": "eb647c19-687b-477a-90e2-2254d4fac732", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-21T00:00:00Z", "date_only": false, "value": "2026-08-21T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-2825", "field": "status.status_updated_at", "uuid": "eb647c19-687b-477a-90e2-2254d4fac732", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-23T01:00:02Z", "date_only": false, "value": "2026-08-23T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-2825", "field": "timestamps.recorded_at", "uuid": "eb647c19-687b-477a-90e2-2254d4fac732", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-10T15:46:03.895Z", "date_only": false, "value": "2026-09-10T15:46:03.895Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2023-2825", "record": "BIT-GITLAB-2023-2825", "field": "modified"}, {"timestamp": "2026-09-11T11:15:42.638Z", "date_only": false, "value": "2026-09-11T11:15:42.638693Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3mvaguavgp327", "record": "CVE-2023-2825", "field": "creation_timestamp", "uuid": "3cc334b5-8937-47fe-bf66-88656a3532bc", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3mvaguavgp327"}]}