{"metadata": {"vulnerability": "GHSA-2f4r-34m4-3w8q", "count": 4, "kinds": {"milestone": 1, "sighting": 2, "kev": 0, "other": 1}}, "data": [{"timestamp": "2025-05-15T21:33:29Z", "date_only": false, "value": "2025-05-15T21:33:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16574", "record": "GHSA-2F4R-34M4-3W8Q", "field": "creation_timestamp", "uuid": "7ae78b42-8446-419e-8a26-52327b81a967", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-47275\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Auth0-PHP provides the PHP SDK for Auth0 Authentication and Management APIs. Starting in version 8.0.0-BETA1 and prior to version 8.14.0, session cookies of applications using the Auth0-PHP SDK configured with CookieStore have authentication tags that can be brute forced, which may result in unauthorized access. Certain pre-conditions are required to be vulnerable to this issue: Applications using the Auth0-PHP SDK, or the Auth0/symfony, Auth0/laravel-auth0, and Auth0/wordpress SDKs that rely on the Auth0-PHP SDK; and session storage configured with CookieStore. Upgrade Auth0/Auth0-PHP to v8.14.0 to receive a patch. As an additional precautionary measure, rotating cookie encryption keys is recommended. Note that once updated, any previous session cookies will be rejected.\n\ud83d\udccf Published: 2025-05-15T21:13:01.150Z\n\ud83d\udccf Modified: 2025-05-15T21:14:59.460Z\n\ud83d\udd17 References:\n1. https://github.com/auth0/auth0-PHP/security/advisories/GHSA-g98g-r7gf-2r25\n2. https://github.com/auth0/laravel-auth0/security/advisories/GHSA-9fwj-9mjf-rhj3\n3. https://github.com/auth0/symfony/security/advisories/GHSA-9wg9-93h9-j8ch\n4. https://github.com/auth0/wordpress/security/advisories/GHSA-2f4r-34m4-3w8q\n5. https://github.com/auth0/auth0-PHP/commit/52a79480fdb246f59dbc089b81a784ae049bd389\n6. https://github.com/auth0/auth0-PHP/releases/tag/8.14.0", "url": "https://t.me/DarkWebInformer_CVEAlerts/16574"}, {"timestamp": "2025-05-15T21:55:47.644Z", "date_only": false, "value": "2025-05-15T21:55:47.644081Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114514077067044674", "record": "GHSA-2f4r-34m4-3w8q", "field": "creation_timestamp", "uuid": "34bb9aa0-18d0-4428-8f16-633ec4ab9aff", "url": "https://infosec.exchange/users/cR0w/statuses/114514077067044674"}, {"timestamp": "2025-05-17T15:07:23Z", "date_only": false, "value": "2025-05-17T15:07:23Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-2f4r-34m4-3w8q", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-17T15:07:23Z", "date_only": false, "value": "2025-05-17T15:07:23Z", "kind": "other", "label": "Updated", "source": "github", "record": "GHSA-2f4r-34m4-3w8q", "field": "modified"}], "metrics": {"as_of": "2026-11-13T06:10:22.406Z", "anchors": {"origin": {"timestamp": "2025-05-17T15:07:23Z", "date_only": false, "value": "2025-05-17T15:07:23Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-2f4r-34m4-3w8q", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-05-17T15:07:23Z", "date_only": false, "value": "2025-05-17T15:07:23Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-2f4r-34m4-3w8q", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 47055779.406964, "hours": 13071.049835267777, "days": 544.6270764694907, "min_seconds": 47055779.406964, "max_seconds": 47055779.406964, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-17T15:07:23Z", "date_only": false, "value": "2025-05-17T15:07:23Z", "kind": "milestone", "label": "Published", "source": "github", "record": "GHSA-2f4r-34m4-3w8q", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T06:10:22.406Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}