{"metadata": {"vulnerability": "CVE-2025-32102", "count": 43, "kinds": {"milestone": 4, "sighting": 30, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-04-04T00:00:00Z", "date_only": false, "value": "2025-04-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-13T18:31:15.015Z", "date_only": false, "value": "2025-04-13T18:31:15.015416Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lmpolytmar2r", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "4be989b6-48cf-4fd8-8c33-775bffe9eaed", "url": "https://bsky.app/profile/buherator.bsky.social/post/3lmpolytmar2r"}, {"timestamp": "2025-04-13T18:33:10.203Z", "date_only": false, "value": "2025-04-13T18:33:10.203154Z", "kind": "sighting", "label": "Seen", "source": "https://schleuss.online/users/vulnbot/statuses/114332086226987435", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "f592d800-1732-4be8-bdc2-a31c22ce1140", "url": "https://schleuss.online/users/vulnbot/statuses/114332086226987435"}, {"timestamp": "2025-04-13T18:50:35.863Z", "date_only": false, "value": "2025-04-13T18:50:35.863785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmppolswya26", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "7a4ee791-642d-4eb8-a87c-a6d32ebfbf2f", "url": "https://bsky.app/profile/nimblenerd.social/post/3lmppolswya26"}, {"timestamp": "2025-04-13T22:30:57.088Z", "date_only": false, "value": "2025-04-13T22:30:57.088984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmq3yn5tmz2z", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "baba16c8-2b39-4516-8a64-99e0d2e8c1cd", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmq3yn5tmz2z"}, {"timestamp": "2025-04-14T19:39:29.003Z", "date_only": false, "value": "2025-04-14T19:39:29.003427Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lmscuwbqm22x", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "efc2472a-fd9b-4571-8d2b-ffc07a973376", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lmscuwbqm22x"}, {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-04-15T03:57:35Z", "date_only": false, "value": "2025-04-15T03:57:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/jj_8tl/408", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "1f556361-e34d-4480-917b-127aeccacf15", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/OkzA9zFYq2\n\n\ud83d\udea8\ud83d\udea8CrushFTP Under Attack! \nCVE-2025-32102: SSRF alert! Attackers can exploit weak host/port validation to hijack requests.\nCVE-2025-32103: Directory traversal flaw exposes remote files to unauthorized access.  \n\ud83d\udd25PoC: https://t.co/ZUcRl7qA7m\n\nZoomEye Dork\ud83d\udc49app=\"CrushFTP\"\nReveals 71k+ vulnerable instances!  \nZoomEye Link: https://t.co/KBmxsCTUFo\nSHODAN Dork\ud83d\udc49server: CrushFTP HTTP Server\n\nRefer: https://t.co/5PLZhC5A6c\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "url": "https://t.me/jj_8tl/408", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-15T06:38:15.985Z", "date_only": false, "value": "2025-04-15T06:38:15.985820Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lmthoujivk2h", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "799acd18-e0b5-45e0-b490-e70e31e8bdbb", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3lmthoujivk2h"}, {"timestamp": "2025-04-15T08:05:58.350Z", "date_only": false, "value": "2025-04-15T08:05:58.350591Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmtmlrhqge2t", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "a96c8838-2bc8-468f-84a5-26dfaf3058e2", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmtmlrhqge2t"}, {"timestamp": "2025-04-15T12:54:25Z", "date_only": false, "value": "2025-04-15T12:54:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11784", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "5922951c-978a-4f0e-8f16-b38e7ae24899", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32102\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows SSRF via the host and port parameters in a command=telnetSocket request to the /WebInterface/function/ URI.\n\ud83d\udccf Published: 2025-04-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T12:36:27.306Z\n\ud83d\udd17 References:\n1. https://www.crushftp.com/\n2. https://www.crushftp.com/download/\n3. https://seclists.org/fulldisclosure/2025/Apr/17", "url": "https://t.me/DarkWebInformer_CVEAlerts/11784"}, {"timestamp": "2025-04-15T13:15:54Z", "date_only": false, "value": "2025-04-15T13:15:54Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4P7Q-HMCP-J657", "record": "GHSA-4P7Q-HMCP-J657", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-04-15T13:15:54.783Z", "date_only": false, "value": "2025-04-15T13:15:54.783", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32102", "record": "FKIE_CVE-2025-32102", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-15T13:47:47.994Z", "date_only": false, "value": "2025-04-15T13:47:47.994Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2025-32102", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-15T15:30:53Z", "date_only": false, "value": "2025-04-15T15:30:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4P7Q-HMCP-J657", "record": "GHSA-4P7Q-HMCP-J657", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-15T16:19:30.673Z", "date_only": false, "value": "2025-04-15T16:19:30.673510Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32102", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-15T16:19:30.673Z", "date_only": false, "value": "2025-04-15T16:19:30.673510Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32102", "record": "FKIE_CVE-2025-32102", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-04-15T16:38:55.127Z", "date_only": false, "value": "2025-04-15T16:38:55.127580Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmujatqeuy2q", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "38a88b37-1c80-486f-be66-d5be4cf1c6c8", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmujatqeuy2q"}, {"timestamp": "2025-04-15T17:26:40Z", "date_only": false, "value": "2025-04-15T17:26:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22960", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "90aa7004-5ad5-4d82-a1af-f73e1d7149f8", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-32102 - CrushFTP SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-32102 \nPublished : April 15, 2025, 1:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows SSRF via the host and port parameters in a command=telnetSocket request to the /WebInterface/function/ URI. \nSeverity: 5.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22960"}, {"timestamp": "2025-04-16T19:39:18.847Z", "date_only": false, "value": "2025-04-16T19:39:18.847978Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmxdsfj2xs2c", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "bab0a35a-b676-4ed1-bf12-050fa573f242", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmxdsfj2xs2c"}, {"timestamp": "2025-04-16T21:02:22.633Z", "date_only": false, "value": "2025-04-16T21:02:22.633738Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmxigyfduc27", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "f3b7c36e-bfe9-4e31-98c4-fdc09a16c6d4", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmxigyfduc27"}, {"timestamp": "2025-04-21T17:43:47.752Z", "date_only": false, "value": "2025-04-21T17:43:47.752Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32102", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-20T07:24:57Z", "date_only": false, "value": "2025-05-20T07:24:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RcLFAo6jOer1k-VS2nA4Md0lDrYUPyjSKu6Fbc19Yb_ozIY", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "3ffdcab1-1f84-4ab7-a74e-fa23e7a77eaf", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-21T07:05:59Z", "date_only": false, "value": "2025-05-21T07:05:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nolm0rIyXvh0VaRouLmMJT-1_OzPIsfSh-28ANnb3cfZ3VI", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "fe9b2301-484c-44fb-b143-5d7c4713bdc3", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-31T21:37:24.617Z", "date_only": false, "value": "2025-05-31T21:37:24.617570Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114604601719249667", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "621b5377-11da-46fa-b59a-f1292ca1bfcf", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/114604601719249667"}, {"timestamp": "2025-05-31T22:34:47Z", "date_only": false, "value": "2025-05-31T22:34:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TheDarkWebInformer/17737", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "b7b9fc32-1a50-411e-842e-920cc1fa9e0f", "content": "\ud83d\udea8CVE-2025-32102 & CVE-2025-32103: CrushFTP Server-Side Request Forgery (SSRF) and Directory Traversal\n\nFOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJDcnVzaEZUUCI%3D\n\nFOFA Query: app=\"CrushFTP\"\n\nResults: 342,867\n\nDisclosure: https://seclists.org/fulldisclosure/2025/Apr/17", "url": "https://t.me/TheDarkWebInformer/17737"}, {"timestamp": "2025-08-09T13:26:57Z", "date_only": false, "value": "2025-08-09T13:26:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "2f685b44-511f-44b2-ba95-22a82b364ed1"}, {"timestamp": "2025-08-11T18:47:42Z", "date_only": false, "value": "2025-08-11T18:47:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "5233bd1a-5433-47e8-b923-f2d392339a33"}, {"timestamp": "2025-10-31T21:02:50.041Z", "date_only": false, "value": "2025-10-31T21:02:50.041402Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jernm2nq2f", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "1763886e-6a5f-4c6d-8469-19d87db9d90f", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jernm2nq2f"}, {"timestamp": "2025-11-03T19:53:19.682Z", "date_only": false, "value": "2025-11-03T19:53:19.682Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-03T19:53:19.682Z", "date_only": false, "value": "2025-11-03T19:53:19.682Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-32102", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-03T21:33:31Z", "date_only": false, "value": "2025-11-03T21:33:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4P7Q-HMCP-J657", "record": "GHSA-4P7Q-HMCP-J657", "field": "modified", "linked_record": true}, {"timestamp": "2026-06-17T09:11:26.773Z", "date_only": false, "value": "2026-06-17T09:11:26.773", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32102", "record": "FKIE_CVE-2025-32102", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-20T21:00:06.434Z", "date_only": false, "value": "2026-07-20T21:00:06.434601Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/1064", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "7056281c-9800-4f1c-b7ac-b904c32344b3", "url": "https://t.me/crackvaultde/1064"}, {"timestamp": "2026-07-20T21:00:06.455Z", "date_only": false, "value": "2026-07-20T21:00:06.455470Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/1065", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "185b732c-869a-4d91-ae28-6ad893bdc3b7", "url": "https://t.me/crackvaultde/1065"}, {"timestamp": "2026-07-20T21:00:06.528Z", "date_only": false, "value": "2026-07-20T21:00:06.528067Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/1036", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "646b7c78-b6a7-4976-83b1-04c5d3069b9f", "url": "https://t.me/crackvaultde/1036"}, {"timestamp": "2026-07-21T00:00:18.262Z", "date_only": false, "value": "2026-07-21T00:00:18.262535Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/1064", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "f451eba2-302f-4b66-b138-642ccbcbf01c", "url": "https://t.me/crackvaultde/1064"}, {"timestamp": "2026-07-21T00:00:18.290Z", "date_only": false, "value": "2026-07-21T00:00:18.290363Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/1065", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "d03132cc-a468-4c6f-9650-51320b52656e", "url": "https://t.me/crackvaultde/1065"}, {"timestamp": "2026-07-21T01:00:09.893Z", "date_only": false, "value": "2026-07-21T01:00:09.893992Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackvaultde/1036", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "2bc15e5a-7ac3-4788-9bd9-c0ee54ced498", "url": "https://t.me/crackvaultde/1036"}, {"timestamp": "2026-07-22T00:00:33.787Z", "date_only": false, "value": "2026-07-22T00:00:33.787073Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackvaultde/1036", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "092a4de0-f2d9-4a93-8e30-247cf8641a14", "url": "https://t.me/crackvaultde/1036", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-22T00:00:33.875Z", "date_only": false, "value": "2026-07-22T00:00:33.875573Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackvaultde/1065", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "3fc07fb5-11bb-43c4-a3d7-dd4e7a239119", "url": "https://t.me/crackvaultde/1065", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-22T00:00:33.900Z", "date_only": false, "value": "2026-07-22T00:00:33.900339Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackvaultde/1064", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "46db8310-dc74-4d9f-85e9-428cffb10ad1", "url": "https://t.me/crackvaultde/1064", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-14T16:00:17.889Z", "date_only": false, "value": "2026-08-14T16:00:17.889171Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/523", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "a4a59e80-710b-4ded-8b3c-27dce89ea0c0", "url": "https://t.me/purp_sec/523"}], "metrics": {"as_of": "2026-11-11T08:48:33.466Z", "anchors": {"origin": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-05-20T07:24:57Z", "date_only": false, "value": "2025-05-20T07:24:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RcLFAo6jOer1k-VS2nA4Md0lDrYUPyjSKu6Fbc19Yb_ozIY", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "3ffdcab1-1f84-4ab7-a74e-fa23e7a77eaf", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2025-04-15T03:57:35Z", "date_only": false, "value": "2025-04-15T03:57:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/jj_8tl/408", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "1f556361-e34d-4480-917b-127aeccacf15", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/OkzA9zFYq2\n\n\ud83d\udea8\ud83d\udea8CrushFTP Under Attack! \nCVE-2025-32102: SSRF alert! Attackers can exploit weak host/port validation to hijack requests.\nCVE-2025-32103: Directory traversal flaw exposes remote files to unauthorized access.  \n\ud83d\udd25PoC: https://t.co/ZUcRl7qA7m\n\nZoomEye Dork\ud83d\udc49app=\"CrushFTP\"\nReveals 71k+ vulnerable instances!  \nZoomEye Link: https://t.co/KBmxsCTUFo\nSHODAN Dork\ud83d\udc49server: CrushFTP HTTP Server\n\nRefer: https://t.co/5PLZhC5A6c\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "url": "https://t.me/jj_8tl/408", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 14255.0, "hours": 3.959722222222222, "days": 0.1649884259259259, "min_seconds": -72145.0, "max_seconds": 14255.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-04-15T03:57:35Z", "date_only": false, "value": "2025-04-15T03:57:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/jj_8tl/408", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "1f556361-e34d-4480-917b-127aeccacf15", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/OkzA9zFYq2\n\n\ud83d\udea8\ud83d\udea8CrushFTP Under Attack! \nCVE-2025-32102: SSRF alert! Attackers can exploit weak host/port validation to hijack requests.\nCVE-2025-32103: Directory traversal flaw exposes remote files to unauthorized access.  \n\ud83d\udd25PoC: https://t.co/ZUcRl7qA7m\n\nZoomEye Dork\ud83d\udc49app=\"CrushFTP\"\nReveals 71k+ vulnerable instances!  \nZoomEye Link: https://t.co/KBmxsCTUFo\nSHODAN Dork\ud83d\udc49server: CrushFTP HTTP Server\n\nRefer: https://t.co/5PLZhC5A6c\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "url": "https://t.me/jj_8tl/408", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 14255.0, "hours": 3.959722222222222, "days": 0.1649884259259259, "min_seconds": -72145.0, "max_seconds": 14255.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-04-15T03:57:35Z", "date_only": false, "value": "2025-04-15T03:57:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/jj_8tl/408", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "1f556361-e34d-4480-917b-127aeccacf15", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/OkzA9zFYq2\n\n\ud83d\udea8\ud83d\udea8CrushFTP Under Attack! \nCVE-2025-32102: SSRF alert! Attackers can exploit weak host/port validation to hijack requests.\nCVE-2025-32103: Directory traversal flaw exposes remote files to unauthorized access.  \n\ud83d\udd25PoC: https://t.co/ZUcRl7qA7m\n\nZoomEye Dork\ud83d\udc49app=\"CrushFTP\"\nReveals 71k+ vulnerable instances!  \nZoomEye Link: https://t.co/KBmxsCTUFo\nSHODAN Dork\ud83d\udc49server: CrushFTP HTTP Server\n\nRefer: https://t.co/5PLZhC5A6c\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "url": "https://t.me/jj_8tl/408", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 3050697.0, "hours": 847.4158333333334, "days": 35.308993055555554, "min_seconds": 2964297.0, "max_seconds": 3050697.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-20T07:24:57Z", "date_only": false, "value": "2025-05-20T07:24:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RcLFAo6jOer1k-VS2nA4Md0lDrYUPyjSKu6Fbc19Yb_ozIY", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "3ffdcab1-1f84-4ab7-a74e-fa23e7a77eaf", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 49711713.46665, "hours": 13808.809296291667, "days": 575.3670540121528, "min_seconds": 49625313.46665, "max_seconds": 49711713.46665, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-15T00:00:00Z", "date_only": false, "value": "2025-04-15T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32102", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T08:48:33.466Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 49697458.46665, "hours": 13804.849574069445, "days": 575.2020655862269, "min_seconds": 49697458.46665, "max_seconds": 49697458.46665, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-15T03:57:35Z", "date_only": false, "value": "2025-04-15T03:57:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/jj_8tl/408", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "1f556361-e34d-4480-917b-127aeccacf15", "content": "\u26a1\ufe0fThe vulnerability details are now available: https://t.co/OkzA9zFYq2\n\n\ud83d\udea8\ud83d\udea8CrushFTP Under Attack! \nCVE-2025-32102: SSRF alert! Attackers can exploit weak host/port validation to hijack requests.\nCVE-2025-32103: Directory traversal flaw exposes remote files to unauthorized access.  \n\ud83d\udd25PoC: https://t.co/ZUcRl7qA7m\n\nZoomEye Dork\ud83d\udc49app=\"CrushFTP\"\nReveals 71k+ vulnerable instances!  \nZoomEye Link: https://t.co/KBmxsCTUFo\nSHODAN Dork\ud83d\udc49server: CrushFTP HTTP Server\n\nRefer: https://t.co/5PLZhC5A6c\n\n#ZoomEye #NetSecMapping #cybersecurity #CyberSpaceInsights2025\n\n\u2728 Shared via Awham AutoFeed \u2728\nChannel: @jj_8tl", "url": "https://t.me/jj_8tl/408", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T08:48:33.466Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 46661016.46665, "hours": 12961.393462958335, "days": 540.0580609565973, "min_seconds": 46661016.46665, "max_seconds": 46661016.46665, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-20T07:24:57Z", "date_only": false, "value": "2025-05-20T07:24:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RcLFAo6jOer1k-VS2nA4Md0lDrYUPyjSKu6Fbc19Yb_ozIY", "record": "CVE-2025-32102", "field": "creation_timestamp", "uuid": "3ffdcab1-1f84-4ab7-a74e-fa23e7a77eaf", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T08:48:33.466Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}