{"metadata": {"vulnerability": "GHSA-4W9V-7H8H-RV8X", "count": 2, "kinds": {"milestone": 0, "sighting": 2, "kev": 0, "other": 0}}, "data": [{"timestamp": "2024-03-02T20:16:54Z", "date_only": false, "value": "2024-03-02T20:16:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/198464", "record": "GHSA-4W9V-7H8H-RV8X", "field": "creation_timestamp", "uuid": "5802a910-2cda-4472-a526-11ffe2b1f0c4", "content": "https://ift.tt/MRWHSNE\nCVE-2024-25677 | Min 1.29.0 XML Document unknown vulnerability (GHSA-4w9v-7h8h-rv8x)", "url": "https://t.me/ctinow/198464"}, {"timestamp": "2025-06-16T18:38:59Z", "date_only": false, "value": "2025-06-16T18:38:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18504", "record": "GHSA-4W9V-7H8H-RV8X", "field": "creation_timestamp", "uuid": "6134e571-7d85-4ef6-8063-0c40cf225026", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-25677\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Min before 1.31.0, local files are not correctly treated as unique security origins, which allows them to improperly request cross-origin resources. For example, a local file may request other local files through an XML document.\n\ud83d\udccf Published: 2024-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-16T18:12:14.109Z\n\ud83d\udd17 References:\n1. https://github.com/minbrowser/min/security/advisories/GHSA-4w9v-7h8h-rv8x", "url": "https://t.me/DarkWebInformer_CVEAlerts/18504"}]}