{"metadata": {"vulnerability": "CVE-2025-24446", "count": 39, "kinds": {"milestone": 8, "sighting": 11, "kev": 0, "other": 20}}, "data": [{"timestamp": "2025-01-21T17:00:45.704Z", "date_only": false, "value": "2025-01-21T17:00:45.704Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-24446", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0115", "record": "NCSC-2025-0115", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": true, "value": "2025-04-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0292", "record": "CERTFR-2025-AVI-0292", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-08T17:00:00Z", "date_only": false, "value": "2025-04-08T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2025-24446", "field": "containers.cna.datePublic"}, {"timestamp": "2025-04-08T20:02:54.121Z", "date_only": false, "value": "2025-04-08T20:02:54.121Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-24446", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-08T20:15:20Z", "date_only": false, "value": "2025-04-08T20:15:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-658H-WC48-RW6R", "record": "GHSA-658H-WC48-RW6R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-08T20:15:20.417Z", "date_only": false, "value": "2025-04-08T20:15:20.417", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24446", "record": "FKIE_CVE-2025-24446", "field": "published"}, {"timestamp": "2025-04-08T20:28:56.898Z", "date_only": false, "value": "2025-04-08T20:28:56.898020Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-24446", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-08T20:28:56.898Z", "date_only": false, "value": "2025-04-08T20:28:56.898020Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24446", "record": "FKIE_CVE-2025-24446", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-08T20:41:34.463Z", "date_only": false, "value": "2025-04-08T20:41:34.463Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-24446", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-08T21:22:41.997Z", "date_only": false, "value": "2025-04-08T21:22:41.997667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftvwoas2z", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "445520f9-3d8c-422a-8dd9-08a96fdd15ea", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftvwoas2z"}, {"timestamp": "2025-04-08T21:31:40Z", "date_only": false, "value": "2025-04-08T21:31:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-658H-WC48-RW6R", "record": "GHSA-658H-WC48-RW6R", "field": "published"}, {"timestamp": "2025-04-08T21:31:40Z", "date_only": false, "value": "2025-04-08T21:31:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-658H-WC48-RW6R", "record": "GHSA-658H-WC48-RW6R", "field": "modified"}, {"timestamp": "2025-04-08T21:40:18.037Z", "date_only": false, "value": "2025-04-08T21:40:18.037818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtgtcw32c", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "8e199658-1597-4cb8-9430-25fe36faf32a", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lmdgtgtcw32c"}, {"timestamp": "2025-04-08T21:48:47.373Z", "date_only": false, "value": "2025-04-08T21:48:47.373346Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114304544059452346", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "951161de-fdc8-45ab-8996-fc146a0cdbaf", "url": "https://mastodon.social/users/CyberSignaler/statuses/114304544059452346"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0292", "record": "CERTFR-2025-AVI-0292", "field": "last_revision_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0292", "record": "CERTFR-2025-AVI-0292", "field": "initial_release_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0292", "record": "CERTFR-2025-AVI-0292", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-09T00:03:05Z", "date_only": false, "value": "2025-04-09T00:03:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22531", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "29a5c33f-3526-4894-8402-8014f0bfb33c", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24446 - ColdFusion Arbitrary Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-24446 \nPublished : April 8, 2025, 8:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22531"}, {"timestamp": "2025-04-09T01:12:00Z", "date_only": false, "value": "2025-04-09T01:12:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/04/adobe-patches-11-critical-coldfusion.html", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "999a1e39-56e4-4657-9b11-1306dc3204f7", "url": "https://thehackernews.com/2025/04/adobe-patches-11-critical-coldfusion.html"}, {"timestamp": "2025-04-09T05:15:22Z", "date_only": false, "value": "2025-04-09T05:15:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/6633", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "6bc8871d-c35a-4a05-b783-035ec6292d07", "content": "\ud83d\udea8 Critical alert: 30 new security flaws found in Adobe ColdFusion\u201411 rated Critical.\n\n\u26a1 Top threats: arbitrary code execution, file system read, security bypass.\n\nCVE-2025-24446 | CVSS 9.1\nCVE-2025-24447 | CVSS 9.1\nCVE-2025-30281 | CVSS 9.1\n(and more)\n\n No active exploits yet\u2014but don\u2019t wait.\n\n\ud83d\udd17 Update now or risk being the next headline: https://thehackernews.com/2025/04/adobe-patches-11-critical-coldfusion.html", "url": "https://t.me/thehackernews/6633"}, {"timestamp": "2025-04-09T06:05:02Z", "date_only": false, "value": "2025-04-09T06:05:02.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/DmYePYeeUyuYEAJCJE3ga3DCof0rIvarD9ftsp4v-ug6Qw", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "528bc8a4-15e8-4017-9e5a-7aa5cf3d5cbb"}, {"timestamp": "2025-04-09T08:08:15.866Z", "date_only": false, "value": "2025-04-09T08:08:15.866613Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0115", "record": "NCSC-2025-0115", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-09T08:08:15.866Z", "date_only": false, "value": "2025-04-09T08:08:15.866613Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0115", "record": "NCSC-2025-0115", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-09T08:08:15.866Z", "date_only": false, "value": "2025-04-09T08:08:15.866613Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0115", "record": "NCSC-2025-0115", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-09T08:20:19.298Z", "date_only": false, "value": "2025-04-09T08:20:19.298+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-10T13:48:23.095Z", "date_only": false, "value": "2025-04-10T13:48:23.095340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmhnfgmpu22y", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "d3877939-3b3d-492f-b648-75c6f8415cec", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmhnfgmpu22y"}, {"timestamp": "2025-04-14T00:00:00Z", "date_only": true, "value": "2025-04-14", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-07252", "record": "CNVD-2025-07252", "field": "submitTime"}, {"timestamp": "2025-04-16T00:00:00Z", "date_only": true, "value": "2025-04-16", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-07252", "record": "CNVD-2025-07252", "field": "openTime"}, {"timestamp": "2025-04-18T17:16:43.828Z", "date_only": false, "value": "2025-04-18T17:16:43.828Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-24446", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-18T17:16:43.828Z", "date_only": false, "value": "2025-04-18T17:16:43.828Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2025-24446", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-18T17:59:51Z", "date_only": false, "value": "2025-04-18T17:59:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12520", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "1162f053-133e-4860-ae39-88e493af571d", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-24446\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution. Exploitation of this issue does not require user interaction, but admin panel privileges are required, and scope is changed.\n\ud83d\udccf Published: 2025-04-08T20:02:54.121Z\n\ud83d\udccf Modified: 2025-04-18T17:16:43.828Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/12520"}, {"timestamp": "2025-08-09T17:25:37Z", "date_only": false, "value": "2025-08-09T17:25:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "b53a0862-6b69-4935-8b48-017141ce2127"}, {"timestamp": "2025-09-10T07:00:39Z", "date_only": false, "value": "2025-09-10T07:00:39.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "record": "CVE-2025-24446", "field": "creation_timestamp", "uuid": "ea771671-cf88-4bc6-9eea-950a4d69a368"}, {"timestamp": "2026-06-17T08:59:03.183Z", "date_only": false, "value": "2026-06-17T08:59:03.183", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-24446", "record": "FKIE_CVE-2025-24446", "field": "lastModified"}]}