{"metadata": {"vulnerability": "CVE-2025-0474", "count": 18, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-01-14T17:02:11.906Z", "date_only": false, "value": "2025-01-14T17:02:11.906Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-0474", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-14T18:50:30.331Z", "date_only": false, "value": "2025-01-14T18:50:30.331Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-0474", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-14T19:10:56Z", "date_only": false, "value": "2025-01-14T19:10:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1583", "record": "CVE-2025-0474", "field": "creation_timestamp", "uuid": "69011ac8-498a-477a-bc6b-20bbf4d57611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0474\n\ud83d\udd39 Description: Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the application user.\nThis issue affects Invoice Ninja: from 5.8.56 through 5.11.23.\n\ud83d\udccf Published: 2025-01-14T18:50:30.331Z\n\ud83d\udccf Modified: 2025-01-14T18:50:30.331Z\n\ud83d\udd17 References:\n1. https://github.com/invoiceninja/invoiceninja/commit/2a9bf353b432d7060e85487b617151ecbc36247d\n2. https://vulncheck.com/advisories/invoice-ninja-ssrf\n3. https://github.com/invoiceninja/invoiceninja/compare/97ae948618230c1812f3223b80bf22dcb0382dc5..435780932fe19063001d79ba518815df62773d71", "url": "https://t.me/DarkWebInformer_CVEAlerts/1583"}, {"timestamp": "2025-01-14T19:15:32Z", "date_only": false, "value": "2025-01-14T19:15:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J2M4-4RVG-26J8", "record": "GHSA-J2M4-4RVG-26J8", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-14T19:15:32.930Z", "date_only": false, "value": "2025-01-14T19:15:32.930", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0474", "record": "FKIE_CVE-2025-0474", "field": "published"}, {"timestamp": "2025-01-14T19:16:21.373Z", "date_only": false, "value": "2025-01-14T19:16:21.373774Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxmq7vwt2n", "record": "CVE-2025-0474", "field": "creation_timestamp", "uuid": "059d8fa7-48fc-48e0-94d6-817d5bb4dde4", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpxmq7vwt2n"}, {"timestamp": "2025-01-14T19:57:39.636Z", "date_only": false, "value": "2025-01-14T19:57:39.636541Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfpzwl7zeo2y", "record": "CVE-2025-0474", "field": "creation_timestamp", "uuid": "e09e3d2e-7a5f-42ed-bfbc-9183586fd21c", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfpzwl7zeo2y"}, {"timestamp": "2025-01-14T20:42:26Z", "date_only": false, "value": "2025-01-14T20:42:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/15348", "record": "CVE-2025-0474", "field": "creation_timestamp", "uuid": "44d730e6-ea98-4834-b391-9daf06a4d387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0474 - \"Invoice Ninja SSRF\"\", \n  \"Content\": \"CVE ID : CVE-2025-0474 \nPublished : Jan. 14, 2025, 7:15 p.m. | 26\u00a0minutes ago \nDescription : Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the application user.  \nThis issue affects Invoice Ninja: from 5.8.56 through 5.11.23. \nSeverity: 7.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/15348"}, {"timestamp": "2025-01-14T21:31:47Z", "date_only": false, "value": "2025-01-14T21:31:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J2M4-4RVG-26J8", "record": "GHSA-J2M4-4RVG-26J8", "field": "published"}, {"timestamp": "2025-01-14T21:31:47Z", "date_only": false, "value": "2025-01-14T21:31:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J2M4-4RVG-26J8", "record": "GHSA-J2M4-4RVG-26J8", "field": "modified"}, {"timestamp": "2025-01-14T21:34:47.777Z", "date_only": false, "value": "2025-01-14T21:34:47.777006Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0474", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-14T21:34:47.777Z", "date_only": false, "value": "2025-01-14T21:34:47.777006Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0474", "record": "FKIE_CVE-2025-0474", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-16T13:25:30.296Z", "date_only": false, "value": "2025-01-16T13:25:30.296929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/brank0x42.bsky.social/post/3lfuewlvyl22t", "record": "CVE-2025-0474", "field": "creation_timestamp", "uuid": "3876bf65-a4ee-449f-96f8-aa284144487b", "url": "https://bsky.app/profile/brank0x42.bsky.social/post/3lfuewlvyl22t"}, {"timestamp": "2025-02-12T20:31:19.642Z", "date_only": false, "value": "2025-02-12T20:31:19.642Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0474", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-14T10:00:26.240Z", "date_only": false, "value": "2025-02-14T10:00:26.240906Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/brank0x42.bsky.social/post/3li4wz6rdys2h", "record": "CVE-2025-0474", "field": "creation_timestamp", "uuid": "f4fbd1d7-269f-4821-96c1-1b691b216f89", "url": "https://bsky.app/profile/brank0x42.bsky.social/post/3li4wz6rdys2h"}, {"timestamp": "2026-07-14T22:25:31.874Z", "date_only": false, "value": "2026-07-14T22:25:31.874Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-0474", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-14T22:25:31.874Z", "date_only": false, "value": "2026-07-14T22:25:31.874Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2025-0474", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-14T23:17:18.717Z", "date_only": false, "value": "2026-07-14T23:17:18.717", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0474", "record": "FKIE_CVE-2025-0474", "field": "lastModified"}]}
