{"metadata": {"vulnerability": "GHSA-3w2c-jfr2-9pg9", "count": 14, "kinds": {"milestone": 2, "sighting": 8, "kev": 0, "other": 4}}, "data": [{"timestamp": "2025-01-07T15:07:26.776Z", "date_only": false, "value": "2025-01-07T15:07:26.776Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-22609", "record": "CVE-2025-22609", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-24T16:30:34.465Z", "date_only": false, "value": "2025-01-24T16:30:34.465Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-22609", "record": "CVE-2025-22609", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-24T16:31:49.442Z", "date_only": false, "value": "2025-01-24T16:31:49.442687Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113884286733931596", "record": "GHSA-3w2c-jfr2-9pg9", "field": "creation_timestamp", "uuid": "cbcf26ad-24d2-4b9f-8eb3-463988cde5a8", "url": "https://infosec.exchange/users/cve/statuses/113884286733931596"}, {"timestamp": "2025-01-24T16:33:08.221Z", "date_only": false, "value": "2025-01-24T16:33:08.221Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-22609 / GitHub_M", "record": "CVE-2025-22609", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-24T16:38:35.607Z", "date_only": false, "value": "2025-01-24T16:38:35.607018Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-22609 / CISA-ADP", "record": "CVE-2025-22609", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-24T16:57:55.303Z", "date_only": false, "value": "2025-01-24T16:57:55.303847Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/113884389353887186", "record": "GHSA-3w2c-jfr2-9pg9", "field": "creation_timestamp", "uuid": "523f037e-960f-49cb-ad8d-01a91443bdd5", "url": "https://infosec.exchange/users/cR0w/statuses/113884389353887186"}, {"timestamp": "2025-01-24T17:05:11Z", "date_only": false, "value": "2025-01-24T17:05:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2953", "record": "GHSA-3W2C-JFR2-9PG9", "field": "creation_timestamp", "uuid": "a0c45f66-e4a8-40a7-be1b-758f7eef4f50", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22609\n\ud83d\udd39 Description: Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to attach any existing private key on a coolify instance to his own server. If the server configuration of IP / domain, port (most likely 22) and user (root) matches with the victim's server configuration, then the attacker can use the `Terminal` feature and execute arbitrary commands on the victim's server. Version 4.0.0-beta.361 fixes the issue.\n\ud83d\udccf Published: 2025-01-24T16:30:34.465Z\n\ud83d\udccf Modified: 2025-01-24T16:33:08.221Z\n\ud83d\udd17 References:\n1. https://github.com/coollabsio/coolify/security/advisories/GHSA-3w2c-jfr2-9pg9", "url": "https://t.me/DarkWebInformer_CVEAlerts/2953"}, {"timestamp": "2025-02-12T20:01:19.146Z", "date_only": false, "value": "2025-02-12T20:01:19.146Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-22609", "record": "CVE-2025-22609", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T20:01:19.146Z", "date_only": false, "value": "2025-02-12T20:01:19.146Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-22609 / CISA-ADP", "record": "CVE-2025-22609", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-01T12:36:06Z", "date_only": false, "value": "2025-04-01T12:36:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/suboxone_chatroom/7370", "record": "GHSA-3W2C-JFR2-9PG9", "field": "creation_timestamp", "uuid": "fafe0bc0-f21f-4282-91bf-905969a6a141", "content": "CVE-2025-22609, -22611, -22612: Multiple vulnerabilities in Coolify, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nThree vulnerabilities of highest severity in Coolify allow for RCE, privilege escalation, and authentication bypass.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/vUWWf\n\ud83d\udc49 Dork: http.favicon.hash_sha256:eaf648b6000a49599ed58bda49e576d0f981e535a8075d524a4be890edcf96d0 AND uri:*login*\n\nVendor's advisory: https://github.com/coollabsio/coolify/security/advisories/GHSA-3w2c-jfr2-9pg9", "url": "https://t.me/suboxone_chatroom/7370"}, {"timestamp": "2026-07-09T03:00:09.954Z", "date_only": false, "value": "2026-07-09T03:00:09.954487Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1432", "record": "GHSA-3W2C-JFR2-9PG9", "field": "creation_timestamp", "uuid": "e8283e71-bbcb-4aed-bab4-679fc26b8d5e", "url": "https://t.me/brutsecurity/1432"}, {"timestamp": "2026-07-10T00:00:33.619Z", "date_only": false, "value": "2026-07-10T00:00:33.619390Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1432", "record": "GHSA-3W2C-JFR2-9PG9", "field": "creation_timestamp", "uuid": "15b7c389-88ad-4a9f-ad0d-dbdc4be45a0c", "url": "https://t.me/brutsecurity/1432"}, {"timestamp": "2026-07-11T15:00:05.459Z", "date_only": false, "value": "2026-07-11T15:00:05.459222Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1432", "record": "GHSA-3W2C-JFR2-9PG9", "field": "creation_timestamp", "uuid": "d295f4ee-d584-40f5-a702-a46c8c02ac16", "url": "https://t.me/brutsecurity/1432"}, {"timestamp": "2026-07-12T00:00:47.234Z", "date_only": false, "value": "2026-07-12T00:00:47.234835Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1432", "record": "GHSA-3W2C-JFR2-9PG9", "field": "creation_timestamp", "uuid": "617b1120-496f-4044-9cb6-2824bc3eaff7", "url": "https://t.me/brutsecurity/1432"}]}