{"metadata": {"vulnerability": "CVE-2025-27134", "count": 14, "kinds": {"milestone": 3, "sighting": 5, "kev": 0, "other": 6}}, "data": [{"timestamp": "2025-02-19T16:30:47.774Z", "date_only": false, "value": "2025-02-19T16:30:47.774Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-27134", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-30T14:55:10.285Z", "date_only": false, "value": "2025-04-30T14:55:10.285Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27134", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-04-30T14:55:10.285Z", "date_only": false, "value": "2025-04-30T14:55:10.285Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-27134", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-30T15:11:08.488Z", "date_only": false, "value": "2025-04-30T15:11:08.488746Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-27134", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-30T15:11:08.488Z", "date_only": false, "value": "2025-04-30T15:11:08.488746Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27134", "record": "FKIE_CVE-2025-27134", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-04-30T15:11:12.895Z", "date_only": false, "value": "2025-04-30T15:11:12.895Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-27134", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-30T15:11:12.895Z", "date_only": false, "value": "2025-04-30T15:11:12.895Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-27134", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-30T15:16:00.927Z", "date_only": false, "value": "2025-04-30T15:16:00.927", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27134", "record": "FKIE_CVE-2025-27134", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-30T15:48:36.297Z", "date_only": false, "value": "2025-04-30T15:48:36.297442Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114427698562006042", "record": "CVE-2025-27134", "field": "creation_timestamp", "uuid": "75c3146a-64e3-4dcc-8cb4-984ff57c13ad", "url": "https://mastodon.social/users/CyberSignaler/statuses/114427698562006042"}, {"timestamp": "2025-04-30T16:30:32.984Z", "date_only": false, "value": "2025-04-30T16:30:32.984749Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo27rtocch2h", "record": "CVE-2025-27134", "field": "creation_timestamp", "uuid": "f9d0c541-85ec-4c2d-bbd8-0eb424a82890", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo27rtocch2h"}, {"timestamp": "2025-04-30T17:32:01Z", "date_only": false, "value": "2025-04-30T17:32:01.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI", "record": "CVE-2025-27134", "field": "creation_timestamp", "uuid": "c95f3a97-b506-4975-a971-5b7b137e1ce1"}, {"timestamp": "2025-04-30T17:55:17Z", "date_only": false, "value": "2025-04-30T17:55:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/24117", "record": "CVE-2025-27134", "field": "creation_timestamp", "uuid": "c0ebde8b-7088-4800-98bc-a82283e999dd", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27134 - Joplin Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27134 \nPublished : April 30, 2025, 3:16 p.m. | 28\u00a0minutes ago \nDescription : Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint `PATCH /api/users/:id` to set the `is_admin` field to 1. The vulnerability allows malicious low-privileged users to perform administrative actions without proper authorization. This issue has been patched in version 3.3.3. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/24117"}, {"timestamp": "2025-06-15T21:02:21.826Z", "date_only": false, "value": "2025-06-15T21:02:21.826209Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lroeg4jhrg2u", "record": "CVE-2025-27134", "field": "creation_timestamp", "uuid": "f09b9300-91c8-4abd-a422-0a2737e9d34e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lroeg4jhrg2u"}, {"timestamp": "2026-06-17T09:03:04.533Z", "date_only": false, "value": "2026-06-17T09:03:04.533", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27134", "record": "FKIE_CVE-2025-27134", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-10T04:34:24.993Z", "anchors": {"origin": {"timestamp": "2025-04-30T14:55:10.285Z", "date_only": false, "value": "2025-04-30T14:55:10.285Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27134", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-04-30T14:55:10.285Z", "date_only": false, "value": "2025-04-30T14:55:10.285Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27134", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 48260354.708331, "hours": 13405.654085647499, "days": 558.5689202353125, "min_seconds": 48260354.708331, "max_seconds": 48260354.708331, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-30T14:55:10.285Z", "date_only": false, "value": "2025-04-30T14:55:10.285Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-27134", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T04:34:24.993Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}