{"metadata": {"vulnerability": "CVE-2025-32896", "count": 25, "kinds": {"milestone": 4, "sighting": 12, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-04-12T03:02:04.962Z", "date_only": false, "value": "2025-04-12T03:02:04.962Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-32896", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-12T14:35:18.423Z", "date_only": false, "value": "2025-04-12T14:35:18.423036Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmmqx6teob2n", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "2713b0c7-51f4-49b1-9039-5281c09adb3f", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmmqx6teob2n"}, {"timestamp": "2025-04-13T04:16:00.760Z", "date_only": false, "value": "2025-04-13T04:16:00.760650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmo6spbxrd2t", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "23a886d2-6302-44e0-a65c-681937f65884", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmo6spbxrd2t"}, {"timestamp": "2025-04-13T18:25:43.506Z", "date_only": false, "value": "2025-04-13T18:25:43.506904Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmpoc4ntrd2n", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "07eb5da1-dc0f-45ff-85fe-4ba7c838864e", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmpoc4ntrd2n"}, {"timestamp": "2025-04-14T03:35:15.393Z", "date_only": false, "value": "2025-04-14T03:35:15.393170Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmqmyqv6vc2y", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "a5e66c62-3bbe-42ee-bb12-51fcc9af06cd", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmqmyqv6vc2y"}, {"timestamp": "2025-04-14T13:41:18.526Z", "date_only": false, "value": "2025-04-14T13:41:18.526551Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmrougeuvc2n", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "cd785fc1-7138-4112-a311-0b7273903310", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmrougeuvc2n"}, {"timestamp": "2025-06-19T10:38:37.159Z", "date_only": false, "value": "2025-06-19T10:38:37.159Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32896", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-06-19T10:38:37.159Z", "date_only": false, "value": "2025-06-19T10:38:37.159Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2025-32896", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-19T11:04:11.922Z", "date_only": false, "value": "2025-06-19T11:04:11.922Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-32896", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-19T11:15:24Z", "date_only": false, "value": "2025-06-19T11:15:24Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-9X53-GR7P-4QF5", "record": "GHSA-9X53-GR7P-4QF5", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-06-19T11:15:24.190Z", "date_only": false, "value": "2025-06-19T11:15:24.190", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32896", "record": "FKIE_CVE-2025-32896", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-19T12:30:34Z", "date_only": false, "value": "2025-06-19T12:30:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-9X53-GR7P-4QF5", "record": "GHSA-9X53-GR7P-4QF5", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-06-19T13:58:32.873Z", "date_only": false, "value": "2025-06-19T13:58:32.873636Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrxom2wa2p2r", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "8e0b4357-5d6f-43a3-87a9-1a0eeded0bdf", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrxom2wa2p2r"}, {"timestamp": "2025-06-19T16:19:58Z", "date_only": false, "value": "2025-06-19T16:19:58Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-9X53-GR7P-4QF5", "record": "GHSA-9X53-GR7P-4QF5", "field": "modified", "linked_record": true}, {"timestamp": "2025-06-20T09:42:55.811Z", "date_only": false, "value": "2025-06-20T09:42:55.811570Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrzqrpogqan2", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "b6cdde59-431b-4e8d-ad1e-6355a5aad6d0", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lrzqrpogqan2"}, {"timestamp": "2025-06-20T11:27:52.032Z", "date_only": false, "value": "2025-06-20T11:27:52.032237Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/paxioncyber.bsky.social/post/3lrzwnazvsk2t", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "f1ae131e-d097-42c2-9085-402ad7e5131c", "url": "https://bsky.app/profile/paxioncyber.bsky.social/post/3lrzwnazvsk2t"}, {"timestamp": "2025-06-20T13:50:51.608Z", "date_only": false, "value": "2025-06-20T13:50:51.608425Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32896", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-06-20T13:50:51.608Z", "date_only": false, "value": "2025-06-20T13:50:51.608425Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32896", "record": "FKIE_CVE-2025-32896", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-06-20T13:53:28.835Z", "date_only": false, "value": "2025-06-20T13:53:28.835Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-32896", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-20T13:53:28.835Z", "date_only": false, "value": "2025-06-20T13:53:28.835Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32896", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-20T13:59:09.837Z", "date_only": false, "value": "2025-06-20T13:59:09.837580Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ls273wly6s2w", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "24e6816f-e799-4fdb-9f75-313512340402", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3ls273wly6s2w"}, {"timestamp": "2025-06-20T14:43:44Z", "date_only": false, "value": "2025-06-20T14:43:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18968", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "117d26fa-ad90-4b40-bbe7-91d29d292bad", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32896\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: # Summary\n\nUnauthorized users can perform Arbitrary File Read and Deserialization\nattack by submit job using restful api-v1.\n\n# Details\nUnauthorized users can access `/hazelcast/rest/maps/submit-job` to submit\njob.\nAn attacker can set extra params in mysql url to perform Arbitrary File\nRead and Deserialization attack.\n\nThis issue affects Apache SeaTunnel: <=2.3.10\n\n# Fixed\n\nUsers are recommended to upgrade to version 2.3.11, and enable restful api-v2 & open https two-way authentication , which fixes the issue.\n\ud83d\udccf Published: 2025-06-19T10:38:37.159Z\n\ud83d\udccf Modified: 2025-06-20T13:53:28.835Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/qvh3zyt1jr25rgvw955rb8qjrnbxfro9\n2. https://github.com/apache/seatunnel/pull/9010", "url": "https://t.me/DarkWebInformer_CVEAlerts/18968", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-06-28T14:05:11.646Z", "date_only": false, "value": "2025-06-28T14:05:11.646200Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lsod65alfc23", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "3fe7e6ed-e680-4551-931c-2ac8c375b458", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lsod65alfc23"}, {"timestamp": "2026-06-17T09:12:46.040Z", "date_only": false, "value": "2026-06-17T09:12:46.040", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32896", "record": "FKIE_CVE-2025-32896", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-14T16:00:18.276Z", "date_only": false, "value": "2026-08-14T16:00:18.276320Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/504", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "233aa150-7d4e-45c2-92e7-761f5e56f4e7", "url": "https://t.me/purp_sec/504"}], "metrics": {"as_of": "2026-11-08T19:27:42.935Z", "anchors": {"origin": {"timestamp": "2025-06-19T10:38:37.159Z", "date_only": false, "value": "2025-06-19T10:38:37.159Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32896", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-06-19T10:38:37.159Z", "date_only": false, "value": "2025-06-19T10:38:37.159Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32896", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-06-20T14:43:44Z", "date_only": false, "value": "2025-06-20T14:43:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18968", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "117d26fa-ad90-4b40-bbe7-91d29d292bad", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32896\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: # Summary\n\nUnauthorized users can perform Arbitrary File Read and Deserialization\nattack by submit job using restful api-v1.\n\n# Details\nUnauthorized users can access `/hazelcast/rest/maps/submit-job` to submit\njob.\nAn attacker can set extra params in mysql url to perform Arbitrary File\nRead and Deserialization attack.\n\nThis issue affects Apache SeaTunnel: <=2.3.10\n\n# Fixed\n\nUsers are recommended to upgrade to version 2.3.11, and enable restful api-v2 & open https two-way authentication , which fixes the issue.\n\ud83d\udccf Published: 2025-06-19T10:38:37.159Z\n\ud83d\udccf Modified: 2025-06-20T13:53:28.835Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/qvh3zyt1jr25rgvw955rb8qjrnbxfro9\n2. https://github.com/apache/seatunnel/pull/9010", "url": "https://t.me/DarkWebInformer_CVEAlerts/18968", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 101106.841, "hours": 28.08523361111111, "days": 1.1702180671296296, "min_seconds": 101106.841, "max_seconds": 101106.841, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-19T10:38:37.159Z", "date_only": false, "value": "2025-06-19T10:38:37.159Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32896", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-06-20T14:43:44Z", "date_only": false, "value": "2025-06-20T14:43:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18968", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "117d26fa-ad90-4b40-bbe7-91d29d292bad", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32896\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: # Summary\n\nUnauthorized users can perform Arbitrary File Read and Deserialization\nattack by submit job using restful api-v1.\n\n# Details\nUnauthorized users can access `/hazelcast/rest/maps/submit-job` to submit\njob.\nAn attacker can set extra params in mysql url to perform Arbitrary File\nRead and Deserialization attack.\n\nThis issue affects Apache SeaTunnel: <=2.3.10\n\n# Fixed\n\nUsers are recommended to upgrade to version 2.3.11, and enable restful api-v2 & open https two-way authentication , which fixes the issue.\n\ud83d\udccf Published: 2025-06-19T10:38:37.159Z\n\ud83d\udccf Modified: 2025-06-20T13:53:28.835Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/qvh3zyt1jr25rgvw955rb8qjrnbxfro9\n2. https://github.com/apache/seatunnel/pull/9010", "url": "https://t.me/DarkWebInformer_CVEAlerts/18968", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 43836545.776322, "hours": 12176.818271200555, "days": 507.36742796668983, "min_seconds": 43836545.776322, "max_seconds": 43836545.776322, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-19T10:38:37.159Z", "date_only": false, "value": "2025-06-19T10:38:37.159Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32896", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T19:27:42.935Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 43735438.935322, "hours": 12148.733037589445, "days": 506.1972098995602, "min_seconds": 43735438.935322, "max_seconds": 43735438.935322, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-06-20T14:43:44Z", "date_only": false, "value": "2025-06-20T14:43:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18968", "record": "CVE-2025-32896", "field": "creation_timestamp", "uuid": "117d26fa-ad90-4b40-bbe7-91d29d292bad", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32896\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: # Summary\n\nUnauthorized users can perform Arbitrary File Read and Deserialization\nattack by submit job using restful api-v1.\n\n# Details\nUnauthorized users can access `/hazelcast/rest/maps/submit-job` to submit\njob.\nAn attacker can set extra params in mysql url to perform Arbitrary File\nRead and Deserialization attack.\n\nThis issue affects Apache SeaTunnel: <=2.3.10\n\n# Fixed\n\nUsers are recommended to upgrade to version 2.3.11, and enable restful api-v2 & open https two-way authentication , which fixes the issue.\n\ud83d\udccf Published: 2025-06-19T10:38:37.159Z\n\ud83d\udccf Modified: 2025-06-20T13:53:28.835Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/qvh3zyt1jr25rgvw955rb8qjrnbxfro9\n2. https://github.com/apache/seatunnel/pull/9010", "url": "https://t.me/DarkWebInformer_CVEAlerts/18968", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T19:27:42.935Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}