{"metadata": {"vulnerability": "CVE-2025-23209", "count": 82, "kinds": {"milestone": 4, "sighting": 57, "kev": 11, "other": 10}}, "data": [{"timestamp": "2025-01-13T17:15:41.051Z", "date_only": false, "value": "2025-01-13T17:15:41.051Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-18T00:32:54.954Z", "date_only": false, "value": "2025-01-18T00:32:54.954Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-01-18T00:32:54.954Z", "date_only": false, "value": "2025-01-18T00:32:54.954Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-23209", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-18T00:57:13Z", "date_only": false, "value": "2025-01-18T00:57:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2270", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "8d7cdd86-3508-46d1-ac4b-1c7f97d841cd", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23209\n\ud83d\udd39 Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a compromised security key is affected. This vulnerability has been patched in Craft 5.5.8 and 4.13.8. Users who cannot update to a patched version, should rotate their security keys and ensure their privacy to help migitgate the issue.\n\ud83d\udccf Published: 2025-01-18T00:32:54.954Z\n\ud83d\udccf Modified: 2025-01-18T00:32:54.954Z\n\ud83d\udd17 References:\n1. https://github.com/craftcms/cms/security/advisories/GHSA-x684-96hh-833x\n2. https://github.com/craftcms/cms/commit/e59e22b30c9dd39e5e2c7fe02c147bcbd004e603\n3. https://craftcms.com/knowledge-base/securing-craft#keep-your-secrets-secret", "url": "https://t.me/DarkWebInformer_CVEAlerts/2270"}, {"timestamp": "2025-01-18T01:15:07Z", "date_only": false, "value": "2025-01-18T01:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-X684-96HH-833X", "record": "GHSA-X684-96HH-833X", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-01-18T01:15:07.633Z", "date_only": false, "value": "2025-01-18T01:15:07.633", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23209", "record": "FKIE_CVE-2025-23209", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-01-18T01:15:48.694Z", "date_only": false, "value": "2025-01-18T01:15:48.694310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfy54asrpp2f", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "9e58b46a-da4c-4c6e-a18d-4d866e07d3ac", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfy54asrpp2f"}, {"timestamp": "2025-01-18T01:48:56.626Z", "date_only": false, "value": "2025-01-18T01:48:56.626270Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfy6ximsry2k", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "f84a8152-852b-452e-9b55-63220ab48401", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfy6ximsry2k"}, {"timestamp": "2025-01-18T01:48:57.446Z", "date_only": false, "value": "2025-01-18T01:48:57.446121Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfy6xiwomx2b", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "f8e51290-7809-4d48-b4c9-ba80cbab067f", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfy6xiwomx2b"}, {"timestamp": "2025-01-18T01:49:02.344Z", "date_only": false, "value": "2025-01-18T01:49:02.344583Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113846839254614017", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "0c1c90b5-4b76-4d7e-a4e4-3b4740d062fa", "url": "https://mastodon.social/users/CyberSignaler/statuses/113846839254614017"}, {"timestamp": "2025-01-18T02:51:21Z", "date_only": false, "value": "2025-01-18T02:51:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/15777", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "da6c8701-4e9d-414f-b367-37c3af70603e", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23209 - Craft CMS Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23209 \nPublished : Jan. 18, 2025, 1:15 a.m. | 29\u00a0minutes ago \nDescription : Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a compromised security key is affected. This vulnerability has been patched in Craft 5.5.8 and 4.13.8. Users who cannot update to a patched version, should rotate their security keys and ensure their privacy to help migitgate the issue. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/15777"}, {"timestamp": "2025-01-18T03:00:37Z", "date_only": false, "value": "2025-01-18T03:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UfSe-6EGS8jfJ09VFnjg91CLSsjj-4fD6Vt4UjLUJiXedlI", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "29ee06d1-114e-4668-b670-d23c325ea276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-01-21T19:48:38Z", "date_only": false, "value": "2025-01-21T19:48:38Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-X684-96HH-833X", "record": "GHSA-X684-96HH-833X", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-23209", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "dcdf1c85-1324-49d1-b3c5-9aa938453fa9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": true, "value": "2025-02-20", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-23209", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-23209", "field": "evidence.0.details.added_date", "uuid": "dcdf1c85-1324-49d1-b3c5-9aa938453fa9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": true, "value": "2025-02-20", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "evidence.0.details.date_added", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-23209", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "dcdf1c85-1324-49d1-b3c5-9aa938453fa9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "status.status_updated_at", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-23209", "field": "status.status_updated_at", "uuid": "dcdf1c85-1324-49d1-b3c5-9aa938453fa9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-23209", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2025-23209 added to CISA KEV"}, {"timestamp": "2025-02-20T18:10:04Z", "date_only": false, "value": "2025-02-20T18:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "f1fd913b-6997-4bd3-a95e-6a99ed25adc4"}, {"timestamp": "2025-02-20T20:27:26.814Z", "date_only": false, "value": "2025-02-20T20:27:26.814773Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lin4tuupj22r", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "2e9c0014-3fb1-4061-a2b6-1b80b1dd8664", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lin4tuupj22r"}, {"timestamp": "2025-02-20T21:53:16.623Z", "date_only": false, "value": "2025-02-20T21:53:16.623057Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3linbnf6ceg2y", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "7b4875f1-7e03-42b6-94cc-d9518ffc77ee", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3linbnf6ceg2y"}, {"timestamp": "2025-02-21T03:48:16.723Z", "date_only": false, "value": "2025-02-21T03:48:16.723354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3linvi6rzwc2p", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "1fed09f5-aea2-485a-b184-2b1421e18c33", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3linvi6rzwc2p"}, {"timestamp": "2025-02-21T04:56:13.643Z", "date_only": false, "value": "2025-02-21T04:56:13.643788Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-23209", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-21T04:56:13.643Z", "date_only": false, "value": "2025-02-21T04:56:13.643788Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23209", "record": "FKIE_CVE-2025-23209", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-21T05:18:29Z", "date_only": false, "value": "2025-02-21T05:18:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4860", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "420f5c43-fd07-4f71-a5c0-1da3d2b38456", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23209\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution (RCE) vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a compromised security key is affected. This vulnerability has been patched in Craft 5.5.8 and 4.13.8. Users who cannot update to a patched version, should rotate their security keys and ensure their privacy to help migitgate the issue.\n\ud83d\udccf Published: 2025-01-18T00:32:54.954Z\n\ud83d\udccf Modified: 2025-02-21T04:56:11.988Z\n\ud83d\udd17 References:\n1. https://github.com/craftcms/cms/security/advisories/GHSA-x684-96hh-833x\n2. https://github.com/craftcms/cms/commit/e59e22b30c9dd39e5e2c7fe02c147bcbd004e603\n3. https://craftcms.com/knowledge-base/securing-craft#keep-your-secrets-secret", "url": "https://t.me/DarkWebInformer_CVEAlerts/4860", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T06:11:35.751Z", "date_only": false, "value": "2025-02-21T06:11:35.751040Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lio5igw5zc2g", "record": "cve-2025-23209", "field": "creation_timestamp", "uuid": "8624265e-4529-4449-9e7e-0e525d28b4a0", "url": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lio5igw5zc2g"}, {"timestamp": "2025-02-21T06:26:00Z", "date_only": false, "value": "2025-02-21T06:26:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/02/cisa-flags-craft-cms-vulnerability-cve.html", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "0e8c945c-b79b-4a61-a463-e46885bc33ba", "url": "https://thehackernews.com/2025/02/cisa-flags-craft-cms-vulnerability-cve.html"}, {"timestamp": "2025-02-21T07:45:38.346Z", "date_only": false, "value": "2025-02-21T07:45:38.346179Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3liocqmki2j2n", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "efac1587-bd6a-4671-8e67-5d55c5405f9f", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3liocqmki2j2n"}, {"timestamp": "2025-02-21T08:03:23Z", "date_only": false, "value": "2025-02-21T08:03:23.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/UHMPZ2U6pWLly2gVE952KhK0O_0FD0IbULnVijwf8aDyIwQ0", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "43b705f6-0dad-4482-b30f-e71da9fff6f5"}, {"timestamp": "2025-02-21T08:26:31Z", "date_only": false, "value": "2025-02-21T08:26:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_News/1032", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "6c78dbdf-d0cc-43c1-83a7-219aaabd883b", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks\nLink: https://thehackernews.com/2025/02/cisa-flags-craft-cms-vulnerability-cve.html", "url": "https://t.me/DarkWebInformer_News/1032", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T08:27:13.230Z", "date_only": false, "value": "2025-02-21T08:27:13.230006Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shoebhakim.bsky.social/post/3liof2xudmy2b", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "93c9ab60-05fa-48a6-964e-4e627dc8889e", "url": "https://bsky.app/profile/shoebhakim.bsky.social/post/3liof2xudmy2b"}, {"timestamp": "2025-02-21T08:30:06.154Z", "date_only": false, "value": "2025-02-21T08:30:06.154354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3liofa3lzjw22", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "d3713038-4b89-4564-9565-bf150a0ccda3", "url": "https://bsky.app/profile/techit.bsky.social/post/3liofa3lzjw22"}, {"timestamp": "2025-02-21T08:31:14Z", "date_only": false, "value": "2025-02-21T08:31:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/6378", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "13aee7df-e71c-41a0-ad81-df70e796a839", "content": "The CISA has flagged a critical vulnerability in Craft CMS, prompting urgent action.\n\nCVE-2025-23209 carries a high CVSS score of 8.1\u2014indicating significant risk to any organization still using outdated versions.\n\nThis code injection flaw opens the door to remote code execution, potentially exposing sensitive user security keys.\n\nLearn more: https://thehackernews.com/2025/02/cisa-flags-craft-cms-vulnerability-cve.html", "url": "https://t.me/thehackernews/6378"}, {"timestamp": "2025-02-21T08:44:56.016Z", "date_only": false, "value": "2025-02-21T08:44:56.016944Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liog2a2u3vh2", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "8f6d5651-0f39-481e-bfe1-047bff795379", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3liog2a2u3vh2"}, {"timestamp": "2025-02-21T08:46:07.475Z", "date_only": false, "value": "2025-02-21T08:46:07.475349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3liog4rim3a24", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "06b36e21-8c10-42d4-863d-0571f0cb7fc7", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3liog4rim3a24"}, {"timestamp": "2025-02-21T09:07:39.697Z", "date_only": false, "value": "2025-02-21T09:07:39.697218Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3liohdbzd3d27", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "7217a414-7a9c-498b-b24b-f49b20331ff6", "url": "https://bsky.app/profile/hackingne.ws/post/3liohdbzd3d27"}, {"timestamp": "2025-02-21T09:14:08.803Z", "date_only": false, "value": "2025-02-21T09:14:08.803901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3liohoulbil24", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "6804288b-2c4d-4a11-8410-18a7b26cd7d9", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3liohoulbil24"}, {"timestamp": "2025-02-21T09:28:00Z", "date_only": false, "value": "2025-02-21T09:28:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/qLG_ePNm1WqHhVV75qq0AJyKKau4zZSivdGXh2FteRJ-LA", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "5338e700-0914-49bd-ba54-9acd2c0e5e31", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T09:28:12Z", "date_only": false, "value": "2025-02-21T09:28:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/6782", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "f906bec3-69b7-42ae-a9ec-c8bb4927e60f", "content": "CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks\n\nCISA adds CVE-2025-23209 to its KEV list as Craft CMS faces active exploitation, urging agencies to patch by March 13, 2025.\n\nThe Hacker News | thehackernews.com \u2022 Feb 21, 2025", "url": "https://t.me/ton618cyber/6782", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T09:28:13Z", "date_only": false, "value": "2025-02-21T09:28:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ton618cyber/2532", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "cfd3ca56-e7ef-467c-b3de-b250743a9337", "content": "CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks\n\nCISA adds CVE-2025-23209 to its KEV list as Craft CMS faces active exploitation, urging agencies to patch by March 13, 2025.\n\nThe Hacker News | thehackernews.com \u2022 Feb 21, 2025", "url": "https://t.me/ton618cyber/2532", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T09:34:26Z", "date_only": false, "value": "2025-02-21T09:34:26.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/231228", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "fd72eed6-3085-47ff-8abf-e15a564a7613", "content": "CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks\nhttps://ift.tt/Vi8Inxz", "url": "https://t.me/ctinow/231228", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T11:46:24Z", "date_only": false, "value": "2025-02-21T11:46:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/82795", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "5e3468b7-123e-424f-9875-0e2795fb8e6b", "content": "\ud83d\udd8b\ufe0f CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks \ud83d\udd8b\ufe0f\n\nA highseverity security flaw impacting the Craft content management system CMS has been added by the U.S. Cybersecurity and Infrastructure Security Agency CISA to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is CVE202523209 CVSS score 8.1, which impacts Craft CMS versions 4 and 5. It was addressed by the.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/82795", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T11:51:14.629Z", "date_only": false, "value": "2025-02-21T11:51:14.629530Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lioqhmzmok2r", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "9ea1262e-0f3f-40c1-9883-d3207deeb991", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lioqhmzmok2r"}, {"timestamp": "2025-02-21T12:03:03Z", "date_only": false, "value": "2025-02-21T12:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/132", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "aec3f2cb-6346-46a6-9d89-a89d022448cf", "content": "CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks \u2013 thehackernews.com\n\nFri, 21 Feb 2025 15:26:00", "url": "https://t.me/TengkorakCyberCrewzz/132", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T13:03:03Z", "date_only": false, "value": "2025-02-21T13:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/2064", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "9985dada-aa04-4e5d-8520-ec1af58e0dce", "content": "CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks \u2013 thehackernews.com\n\nFri, 21 Feb 2025 15:26:00", "url": "https://t.me/MalaysiaHacktivistz/2064", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T13:03:03Z", "date_only": false, "value": "2025-02-21T13:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/8767", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "193bd5ff-c376-4fa5-9fed-0102b2cc9b02", "content": "CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks \u2013 thehackernews.com\n\nFri, 21 Feb 2025 15:26:00", "url": "https://t.me/MalaysiaHacktivistz/8767", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T13:03:03Z", "date_only": false, "value": "2025-02-21T13:03:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/28369", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "1cda2f67-5639-4d6e-a268-dbe1d9c0c469", "content": "CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks \u2013 thehackernews.com\n\nFri, 21 Feb 2025 15:26:00", "url": "https://t.me/TengkorakCyberCrewzz/28369", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T14:20:17Z", "date_only": false, "value": "2025-02-21T14:20:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/53126", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "49d5a5f8-2fd9-467d-bca4-cc699e79771d", "content": "CISA Warns of Attacks Exploiting Craft CMS Vulnerability\nhttps://www.securityweek.com/cisa-warns-of-attacks-exploiting-craft-cms-vulnerability/\n\nCISA has added a Craft CMS flaw tracked as CVE-2025-23209 to its Known Exploited Vulnerabilities (KEV) catalog.\nThe post CISA Warns of Attacks Exploiting Craft CMS Vulnerability (https://www.securityweek.com/cisa-warns-of-attacks-exploiting-craft-cms-vulnerability/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/53126", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-21T16:56:50.584Z", "date_only": false, "value": "2025-02-21T16:56:50.584073Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lipbka4wle2f", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "c51067b7-8e7c-4edc-9c4b-7c8d6a15de60", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lipbka4wle2f"}, {"timestamp": "2025-02-21T19:54:06.378Z", "date_only": false, "value": "2025-02-21T19:54:06.378823Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3liplh43zlr2m", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "591becfc-0ba4-41f4-9dc4-0e8a228f8535", "url": "https://bsky.app/profile/ninjaowl.ai/post/3liplh43zlr2m"}, {"timestamp": "2025-02-21T22:10:24Z", "date_only": false, "value": "2025-02-21T22:10:24.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/PokG_xyqGpcuS2XK79WAsCDq6AN7zAvCxGDJgQBTFS7ZpAUW", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "5b24f398-c147-4eea-9988-78dd31b0788d"}, {"timestamp": "2025-02-22T03:05:08Z", "date_only": false, "value": "2025-02-22T03:05:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/hUQapkg9UR2bkTaerwhU-B1RsVgKpzq9q7QwELm-pvvM1A", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "5557e836-f1a9-4c12-b4b7-cdf69cbb6fee", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-22T20:41:49Z", "date_only": false, "value": "2025-02-22T20:41:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/5RqYKm4m4AMpBUMgG4-v2i95-ECMF1wKbNU2ZH6hQrFkk9M", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "f5c511c2-22aa-47ff-903c-6217a6a698a8", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-22T21:18:02.043Z", "date_only": false, "value": "2025-02-22T21:18:02.043147Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lisam77cwc2g", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "11e067e4-ea7a-48ce-9a6f-5b0732384dfa", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lisam77cwc2g"}, {"timestamp": "2025-02-23T02:11:06Z", "date_only": false, "value": "2025-02-23T02:11:06.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "26e78cd9-63ce-4f83-89ed-a5efb10a3e94"}, {"timestamp": "2025-02-23T15:06:08.082Z", "date_only": false, "value": "2025-02-23T15:06:08.082833Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3liu4bzq7c223", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "c9fad2f0-cd72-4d10-88b6-5b0a4e95fc0e", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3liu4bzq7c223"}, {"timestamp": "2025-02-24T14:35:51.981Z", "date_only": false, "value": "2025-02-24T14:35:51.981371Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3liwl2vwbwy2s", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "be4dd2ee-ddc3-4f46-8b52-45be094b904f", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3liwl2vwbwy2s"}, {"timestamp": "2025-02-28T07:30:11.492Z", "date_only": false, "value": "2025-02-28T07:30:11.492824Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersonar.bsky.social/post/3lj7v5gyvxz2n", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "d0307800-07a6-4cf9-9f40-073c06c0830d", "url": "https://bsky.app/profile/cybersonar.bsky.social/post/3lj7v5gyvxz2n"}, {"timestamp": "2025-03-06T15:04:07.117Z", "date_only": false, "value": "2025-03-06T15:04:07.117574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pressewelle.de/post/3ljprcnl3y72q", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "da020c4f-c4cf-423a-9d90-c01a0c9191c1", "url": "https://bsky.app/profile/pressewelle.de/post/3ljprcnl3y72q"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": true, "value": "2025-03-13", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "evidence.0.details.due_date", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-03-30T03:42:09.819Z", "date_only": false, "value": "2025-03-30T03:42:09.819742Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/calebpr.bsky.social/post/3llkwfcrlyo24", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "2e8e7e09-1490-497e-85a0-5c1ba77ce02e", "url": "https://bsky.app/profile/calebpr.bsky.social/post/3llkwfcrlyo24"}, {"timestamp": "2025-04-28T04:49:19Z", "date_only": false, "value": "2025-04-28T04:49:19.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5879", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "86d7f434-1509-4e61-8667-22f7b2dbc689", "content": "\u200b\u26a1\ufe0f\u041e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0445\u043e\u0440\u043e\u0448\u043e, \u0430 \u0434\u0432\u0435 \u2014 \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c\u0443 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0443: \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043d\u0430 Craft CMS\n\n\ud83d\udcac\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CSIRT \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Orange Cyberdefense \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0441\u0435\u0440\u0438\u044e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u0431\u0430\u0437\u0435 Craft CMS \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432. \u0420\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u043b\u043e\u0449\u0430\u0434\u043e\u043a, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432\u044b\u044f\u0432\u0438\u043b\u0438: \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044e \u0438\u0437 \u0434\u0432\u0443\u0445 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0431\u0440\u0435\u0448\u0435\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u0438\u0437\u044a\u044f\u043d \u0432 \u0437\u0430\u0449\u0438\u0442\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0438\u043d\u0434\u0435\u043a\u0441 CVE-2025-32432, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c CVE-2024-58136 \u0442\u0430\u0438\u0442\u0441\u044f \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii, \u043b\u0435\u0436\u0430\u0449\u0435\u043c \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 Craft CMS \u2014 \u043e\u043d\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u044d\u0442\u0438\u0447\u043d\u043e\u0433\u043e \u0445\u0430\u043a\u0438\u043d\u0433\u0430 SensePost, \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Orange Cyberdefense, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043a\u0430\u0440\u0442\u0438\u043d\u0443 \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u044f. \u0410\u0432\u0442\u043e\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 PHP-\u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u0412\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0440\u0442\u0443\u0435\u0442 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-32432: \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u043e\u0441\u043e\u0431\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \"return URL\". \u041f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 PHP-\u0444\u0430\u0439\u043b \u0441\u0435\u0441\u0441\u0438\u0438, \u0430 \u0435\u0451 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 CVE-2024-58136, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f JSON-\u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430, \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0449\u0430\u044f PHP-\u043a\u043e\u0434 \u0438\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u043c, \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0442 \u043a\u0430\u043d\u0430\u043b\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0430 \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043f\u043e\u0437\u0436\u0435 \u0432 \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0435\u0439\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0421\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Yii \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-58136 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.0.52 \u043e\u0442 9 \u0430\u043f\u0440\u0435\u043b\u044f. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Craft CMS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f 3.9.15, 4.14.15 \u0438 5.6.17, \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0435 CVE-2025-32432.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 Craft CMS \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Yii 2.0.51, \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Orange \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442: \u043f\u043e\u0441\u043b\u0435 \u0430\u043f\u0434\u0435\u0439\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u0442\u0435\u0440\u044f\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0437\u044a\u044f\u043d \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0439. \u041f\u0435\u0440\u0432\u043e\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u2014 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 php craft setup/security-key \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 CRAFT_SECURITY_KEY \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043c\u0435\u043d\u0430 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 S3, Stripe \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438) \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u043a\u0432\u0438\u0437\u0438\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043c\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0431\u0440\u043e\u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b php craft resave/users --set passwordResetRequired --to \"fn() => true\".\n\n\u0418\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043a \u043e\u0442\u0447\u0435\u0442\u0443 SensePost . \u0415\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 Craft CMS \u0432\u0435\u0440\u0441\u0438\u0439 4 \u0438 5 \u2014 CVE-2025-23209, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0427\u0435\u0440\u0435\u0434\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u043a \u044d\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435, \u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u043e\u0431\u043e\u0439 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u0442\u0440\u043e\u0433\u043e\u0433\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5879", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-22T19:27:25Z", "date_only": false, "value": "2025-10-22T19:27:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-X684-96HH-833X", "record": "GHSA-X684-96HH-833X", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:26:12.960Z", "date_only": false, "value": "2026-02-02T12:26:12.960645Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf56ebb5-0a5a-41a0-97c0-cec1806b3cba", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "a3a00b0e-7b33-419f-b0ed-68a755e67a7f", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf56ebb5-0a5a-41a0-97c0-cec1806b3cba", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-02T12:26:12.960Z", "date_only": false, "value": "2026-02-02T12:26:12.960645Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf56ebb5-0a5a-41a0-97c0-cec1806b3cba", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "0053feaa-69c3-430d-9334-7189deba9d33", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bf56ebb5-0a5a-41a0-97c0-cec1806b3cba", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-02-26T19:09:05.707Z", "date_only": false, "value": "2026-02-26T19:09:05.707Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T19:09:05.707Z", "date_only": false, "value": "2026-02-26T19:09:05.707Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-23209", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:52:39.483Z", "date_only": false, "value": "2026-06-17T08:52:39.483", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23209", "record": "FKIE_CVE-2025-23209", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:27.050Z", "date_only": false, "value": "2026-06-19T12:46:27.050648Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a17cd25-59b7-48bc-ab15-ba85c192809d", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "9d9ad45e-75d9-48e7-a5bc-308b5f9ef002", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a17cd25-59b7-48bc-ab15-ba85c192809d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-23209", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "dcdf1c85-1324-49d1-b3c5-9aa938453fa9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:33.441Z", "date_only": false, "value": "2026-06-23T11:14:33.441217Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/dcdf1c85-1324-49d1-b3c5-9aa938453fa9", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "5d9c105c-17ca-4d0e-9db1-b4096a3fd079", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/dcdf1c85-1324-49d1-b3c5-9aa938453fa9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:06:05.238Z", "date_only": false, "value": "2026-06-23T14:06:05.238210Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2f916741-79db-4a61-bb47-e659897b4f9e", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "d16dc593-1d25-46a3-9e71-f17b03581313", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2f916741-79db-4a61-bb47-e659897b4f9e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-09T03:00:09.482Z", "date_only": false, "value": "2026-07-09T03:00:09.482435Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1553", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "ee9281f7-b362-4938-8c32-c865df6b08e3", "url": "https://t.me/brutsecurity/1553"}, {"timestamp": "2026-07-10T00:00:33.115Z", "date_only": false, "value": "2026-07-10T00:00:33.115806Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1553", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "73f7c4bb-b36d-43d4-bca8-4d275b6f1c9a", "url": "https://t.me/brutsecurity/1553"}, {"timestamp": "2026-07-11T14:00:03.935Z", "date_only": false, "value": "2026-07-11T14:00:03.935357Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1553", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "37db328a-e765-4272-99b2-5ee44f380b92", "url": "https://t.me/brutsecurity/1553", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T00:00:47.714Z", "date_only": false, "value": "2026-07-12T00:00:47.714740Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1553", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "fe221a59-ca27-4596-a871-fbe235643d9d", "url": "https://t.me/brutsecurity/1553", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T08:38:51.589Z", "anchors": {"origin": {"timestamp": "2025-01-18T00:32:54.954Z", "date_only": false, "value": "2025-01-18T00:32:54.954Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-01-18T00:32:54.954Z", "date_only": false, "value": "2025-01-18T00:32:54.954Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-01-18T03:00:37Z", "date_only": false, "value": "2025-01-18T03:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UfSe-6EGS8jfJ09VFnjg91CLSsjj-4fD6Vt4UjLUJiXedlI", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "29ee06d1-114e-4668-b670-d23c325ea276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 2849225.046, "hours": 791.4514016666667, "days": 32.977141736111115, "min_seconds": 2849225.046, "max_seconds": 2935625.046, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-18T00:32:54.954Z", "date_only": false, "value": "2025-01-18T00:32:54.954Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 2849225.046, "hours": 791.4514016666667, "days": 32.977141736111115, "min_seconds": 2849225.046, "max_seconds": 2935625.046, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-18T00:32:54.954Z", "date_only": false, "value": "2025-01-18T00:32:54.954Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 8862.046, "hours": 2.4616794444444445, "days": 0.10256997685185186, "min_seconds": 8862.046, "max_seconds": 8862.046, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-18T00:32:54.954Z", "date_only": false, "value": "2025-01-18T00:32:54.954Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-01-18T03:00:37Z", "date_only": false, "value": "2025-01-18T03:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UfSe-6EGS8jfJ09VFnjg91CLSsjj-4fD6Vt4UjLUJiXedlI", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "29ee06d1-114e-4668-b670-d23c325ea276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 57571556.635585, "hours": 15992.099065440278, "days": 666.3374610600116, "min_seconds": 57571556.635585, "max_seconds": 57571556.635585, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-18T00:32:54.954Z", "date_only": false, "value": "2025-01-18T00:32:54.954Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23209", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T08:38:51.589Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 54722331.589585, "hours": 15200.64766377361, "days": 633.3603193239004, "min_seconds": 54635931.589585, "max_seconds": 54722331.589585, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-20T00:00:00Z", "date_only": false, "value": "2025-02-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-23209", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "4cc51401-c57e-4a06-9083-da28303b2081", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-15T08:38:51.589Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 57562694.589585, "hours": 15989.637385995833, "days": 666.2348910831597, "min_seconds": 57562694.589585, "max_seconds": 57562694.589585, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-01-18T03:00:37Z", "date_only": false, "value": "2025-01-18T03:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UfSe-6EGS8jfJ09VFnjg91CLSsjj-4fD6Vt4UjLUJiXedlI", "record": "CVE-2025-23209", "field": "creation_timestamp", "uuid": "29ee06d1-114e-4668-b670-d23c325ea276", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T08:38:51.589Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}