{"metadata": {"vulnerability": "CVE-2025-30288", "count": 33, "kinds": {"milestone": 8, "sighting": 5, "kev": 0, "other": 20}}, "data": [{"timestamp": "2025-02-25T15:15:00Z", "date_only": false, "value": "2025-02-25T15:15:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0115", "record": "NCSC-2025-0115", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-20T17:36:17.301Z", "date_only": false, "value": "2025-03-20T17:36:17.301Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-30288", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-08T00:00:00Z", "date_only": true, "value": "2025-04-08", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0292", "record": "CERTFR-2025-AVI-0292", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-08T17:00:00Z", "date_only": false, "value": "2025-04-08T17:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / adobe", "record": "CVE-2025-30288", "field": "containers.cna.datePublic"}, {"timestamp": "2025-04-08T20:02:55.419Z", "date_only": false, "value": "2025-04-08T20:02:55.419Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-30288", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-08T20:15:26Z", "date_only": false, "value": "2025-04-08T20:15:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-J72Q-QC2X-RQ8G", "record": "GHSA-J72Q-QC2X-RQ8G", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-08T20:15:26.583Z", "date_only": false, "value": "2025-04-08T20:15:26.583", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30288", "record": "FKIE_CVE-2025-30288", "field": "published"}, {"timestamp": "2025-04-08T21:22:49.614Z", "date_only": false, "value": "2025-04-08T21:22:49.614339Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftycli42f", "record": "CVE-2025-30288", "field": "creation_timestamp", "uuid": "e744b4ef-0358-4b50-896c-147c67079f5f", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmdftycli42f"}, {"timestamp": "2025-04-08T21:31:41Z", "date_only": false, "value": "2025-04-08T21:31:41Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-J72Q-QC2X-RQ8G", "record": "GHSA-J72Q-QC2X-RQ8G", "field": "published"}, {"timestamp": "2025-04-08T21:31:41Z", "date_only": false, "value": "2025-04-08T21:31:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-J72Q-QC2X-RQ8G", "record": "GHSA-J72Q-QC2X-RQ8G", "field": "modified"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-08T22:00:00Z", "date_only": false, "value": "2025-04-08T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0292", "record": "CERTFR-2025-AVI-0292", "field": "last_revision_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0292", "record": "CERTFR-2025-AVI-0292", "field": "initial_release_date"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": false, "value": "2025-04-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0292", "record": "CERTFR-2025-AVI-0292", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-09T00:02:55Z", "date_only": false, "value": "2025-04-09T00:02:55.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22522", "record": "CVE-2025-30288", "field": "creation_timestamp", "uuid": "c12ff547-02fb-4868-af7c-a09a72b40ff9", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-30288 - ColdFusion Improper Access Control Security Feature Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-30288 \nPublished : April 8, 2025, 8:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22522"}, {"timestamp": "2025-04-09T08:08:15.866Z", "date_only": false, "value": "2025-04-09T08:08:15.866613Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0115", "record": "NCSC-2025-0115", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-09T08:08:15.866Z", "date_only": false, "value": "2025-04-09T08:08:15.866613Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0115", "record": "NCSC-2025-0115", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-09T08:08:15.866Z", "date_only": false, "value": "2025-04-09T08:08:15.866613Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0115", "record": "NCSC-2025-0115", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-09T08:20:19.298Z", "date_only": false, "value": "2025-04-09T08:20:19.298+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0753", "record": "WID-SEC-W-2025-0753", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-18T00:00:00Z", "date_only": true, "value": "2025-04-18", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-07806", "record": "CNVD-2025-07806", "field": "submitTime"}, {"timestamp": "2025-04-18T17:53:39.909Z", "date_only": false, "value": "2025-04-18T17:53:39.909Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / adobe", "record": "CVE-2025-30288", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-18T17:59:29Z", "date_only": false, "value": "2025-04-18T17:59:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12506", "record": "CVE-2025-30288", "field": "creation_timestamp", "uuid": "d7116c1b-48ce-4b20-98a5-34e23a3d8718", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-30288\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low privileged attacker with local access could leverage this vulnerability to bypass security protections and execute code. Exploitation of this issue requires user interaction in that a victim must be coerced into performing actions within the application and scope is changed.\n\ud83d\udccf Published: 2025-04-08T20:02:55.419Z\n\ud83d\udccf Modified: 2025-04-18T17:53:39.909Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/coldfusion/apsb25-15.html", "url": "https://t.me/DarkWebInformer_CVEAlerts/12506"}, {"timestamp": "2025-04-22T00:00:00Z", "date_only": true, "value": "2025-04-22", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-07806", "record": "CNVD-2025-07806", "field": "openTime"}, {"timestamp": "2025-06-25T11:32:57.975Z", "date_only": false, "value": "2025-06-25T11:32:57.975470Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hoyahaxa.bsky.social/post/3lsgjb6emgc25", "record": "CVE-2025-30288", "field": "creation_timestamp", "uuid": "7db5be0e-b438-4fc8-9aed-a7b168a865a4", "url": "https://bsky.app/profile/hoyahaxa.bsky.social/post/3lsgjb6emgc25"}, {"timestamp": "2025-06-25T11:56:38.499Z", "date_only": false, "value": "2025-06-25T11:56:38.499546Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lsgkllxt232p", "record": "CVE-2025-30288", "field": "creation_timestamp", "uuid": "13568d18-54d0-48e5-8c06-46809d9306db", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lsgkllxt232p"}, {"timestamp": "2025-09-05T03:55:30.729Z", "date_only": false, "value": "2025-09-05T03:55:30.729534Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-30288", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-09-05T03:55:30.729Z", "date_only": false, "value": "2025-09-05T03:55:30.729534Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30288", "record": "FKIE_CVE-2025-30288", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-02-26T18:28:31.368Z", "date_only": false, "value": "2026-02-26T18:28:31.368Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-30288", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T18:28:31.368Z", "date_only": false, "value": "2026-02-26T18:28:31.368Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-30288", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:08:28.167Z", "date_only": false, "value": "2026-06-17T09:08:28.167", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-30288", "record": "FKIE_CVE-2025-30288", "field": "lastModified"}]}
