{"metadata": {"vulnerability": "CVE-2025-4366", "count": 28, "kinds": {"milestone": 5, "sighting": 14, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-05-05T17:42:10.923Z", "date_only": false, "value": "2025-05-05T17:42:10.923Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-4366", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-22T12:00:00Z", "date_only": false, "value": "2025-05-22T12:00:00Z", "kind": "milestone", "label": "Published", "source": "osv_rustsec \u00b7 RUSTSEC-2025-0037", "record": "RUSTSEC-2025-0037", "field": "published"}, {"timestamp": "2025-05-22T13:16:36.460Z", "date_only": false, "value": "2025-05-22T13:16:36.460037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cloudflare.social/post/3lpr777ouec2n", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "3a55e17e-40cc-43d4-921c-f1be54bdbd90", "url": "https://bsky.app/profile/cloudflare.social/post/3lpr777ouec2n"}, {"timestamp": "2025-05-22T15:11:00Z", "date_only": false, "value": "2025-05-22T15:11:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / cloudflare", "record": "CVE-2025-4366", "field": "containers.cna.datePublic"}, {"timestamp": "2025-05-22T15:50:20.789Z", "date_only": false, "value": "2025-05-22T15:50:20.789Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4366", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-22T15:50:20.789Z", "date_only": false, "value": "2025-05-22T15:50:20.789Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / cloudflare", "record": "CVE-2025-4366", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-22T16:15:55.180Z", "date_only": false, "value": "2025-05-22T16:15:55.180", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4366", "record": "FKIE_CVE-2025-4366", "field": "published"}, {"timestamp": "2025-05-22T16:22:01.588Z", "date_only": false, "value": "2025-05-22T16:22:01.588597Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114552400842390775", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "3ac50415-9687-4064-9671-b35ea2c9a063", "url": "https://infosec.exchange/users/cR0w/statuses/114552400842390775"}, {"timestamp": "2025-05-22T16:44:24Z", "date_only": false, "value": "2025-05-22T16:44:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17318", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "5eff5e11-0114-4996-8eaf-703ab336b781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4366\n\ud83d\udd25 CVSS Score: 7.4 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: A request smuggling vulnerability identified within Pingora\u2019s proxying framework, pingora-proxy, allows malicious HTTP requests to be injected via manipulated request bodies on cache HITs, leading to unauthorized request execution and potential cache poisoning.\n\nFixed in:\u00a0 https://github.com/cloudflare/pingora/commit/fda3317ec822678564d641e7cf1c9b77ee3759ff https://github.com/cloudflare/pingora/commit/fda3317ec822678564d641e7cf1c9b77ee3759ff \n\nImpact: The issue could lead to request smuggling in cases where Pingora\u2019s proxying framework, pingora-proxy, is used for caching allowing an attacker to manipulate headers and URLs in subsequent requests made on the same HTTP/1.1 connection.\n\ud83d\udccf Published: 2025-05-22T15:50:20.789Z\n\ud83d\udccf Modified: 2025-05-22T15:50:20.789Z\n\ud83d\udd17 References:\n1. https://github.com/cloudflare/pingora", "url": "https://t.me/DarkWebInformer_CVEAlerts/17318"}, {"timestamp": "2025-05-22T18:30:25.819Z", "date_only": false, "value": "2025-05-22T18:30:25.819289Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4366", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-22T18:30:25.819Z", "date_only": false, "value": "2025-05-22T18:30:25.819289Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4366", "record": "FKIE_CVE-2025-4366", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-23T02:18:08.733Z", "date_only": false, "value": "2025-05-23T02:18:08.733895Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lpskurx42h2r", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "79b8c710-7c78-4383-b403-8046a0d46852", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lpskurx42h2r"}, {"timestamp": "2025-05-23T10:26:02.254Z", "date_only": false, "value": "2025-05-23T10:26:02.254866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lptg2bfgppd2", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "ce51891f-d859-4328-bc68-32b28f3f847e", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lptg2bfgppd2"}, {"timestamp": "2025-05-23T11:10:38.539Z", "date_only": false, "value": "2025-05-23T11:10:38.539235Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lptim3bsria2", "record": "cve-2025-4366", "field": "creation_timestamp", "uuid": "f91e632b-9cde-428c-91ea-de34c4fd237f", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lptim3bsria2"}, {"timestamp": "2025-05-23T13:33:18Z", "date_only": false, "value": "2025-05-23T13:33:18.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/b4G286gf4c4N1gVNDL3bOV9dh-zQD24vFIhVQTwrEBm8Wys", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "63cdd794-ff97-4e1f-abb3-511f420f6b7b"}, {"timestamp": "2025-05-23T16:56:16.440Z", "date_only": false, "value": "2025-05-23T16:56:16.440800Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpu3wmcshma2", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "1f661b32-9202-4e2e-913b-bf36e47be7ee", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpu3wmcshma2"}, {"timestamp": "2025-05-23T20:34:08.441Z", "date_only": false, "value": "2025-05-23T20:34:08.441444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpui4gengsc2", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "2ab3e0bd-6ec3-459d-984b-89cbb4a5b1c1", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpui4gengsc2"}, {"timestamp": "2025-05-26T08:49:21.007Z", "date_only": false, "value": "2025-05-26T08:49:21.007238Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq2rzfkdizj2", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "576b3c31-4f19-4a82-8b8c-9a7ff0797a33", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq2rzfkdizj2"}, {"timestamp": "2025-05-26T12:31:39.518Z", "date_only": false, "value": "2025-05-26T12:31:39.518611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq36jzqeknx2", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "01cca1a6-aec9-42ad-8f9a-9b0c0e505664", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq36jzqeknx2"}, {"timestamp": "2025-05-27T21:23:25.181Z", "date_only": false, "value": "2025-05-27T21:23:25.181183Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6mjs7ka242", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "e47c24b6-551d-4e89-bd36-22b5f3db6d1f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6mjs7ka242"}, {"timestamp": "2025-05-28T08:10:43.378Z", "date_only": false, "value": "2025-05-28T08:10:43.378416Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7qtdoytuv2", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "42da2162-8e7f-4665-8961-ced69274d057", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7qtdoytuv2"}, {"timestamp": "2025-05-28T20:00:17.340Z", "date_only": false, "value": "2025-05-28T20:00:17.340876Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaygpccql42", "record": "CVE-2025-4366", "field": "creation_timestamp", "uuid": "48096574-f9fb-4a9c-8510-f4954c77f2a4", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqaygpccql42"}, {"timestamp": "2025-06-18T13:46:25.042Z", "date_only": false, "value": "2025-06-18T13:46:25.042Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-4366", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-06-18T13:46:25.042Z", "date_only": false, "value": "2025-06-18T13:46:25.042Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4366", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-06-20T18:07:47Z", "date_only": false, "value": "2025-06-20T18:07:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-93C7-7XQW-W357", "record": "GHSA-93C7-7XQW-W357", "field": "published"}, {"timestamp": "2025-06-20T18:07:47Z", "date_only": false, "value": "2025-06-20T18:07:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-93C7-7XQW-W357", "record": "GHSA-93C7-7XQW-W357", "field": "modified"}, {"timestamp": "2025-10-28T06:02:18Z", "date_only": false, "value": "2025-10-28T06:02:18Z", "kind": "other", "label": "Updated", "source": "osv_rustsec \u00b7 RUSTSEC-2025-0037", "record": "RUSTSEC-2025-0037", "field": "modified"}, {"timestamp": "2026-06-17T09:33:07.383Z", "date_only": false, "value": "2026-06-17T09:33:07.383", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4366", "record": "FKIE_CVE-2025-4366", "field": "lastModified"}]}