{"metadata": {"vulnerability": "GHSA-8W24-GFGQ-JG72", "count": 8, "kinds": {"milestone": 2, "sighting": 2, "kev": 0, "other": 4}}, "data": [{"timestamp": "2025-01-07T15:07:26.775Z", "date_only": false, "value": "2025-01-07T15:07:26.775Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-22607", "record": "CVE-2025-22607", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-24T15:45:03.711Z", "date_only": false, "value": "2025-01-24T15:45:03.711Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-22607", "record": "CVE-2025-22607", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-24T15:45:03.711Z", "date_only": false, "value": "2025-01-24T15:45:03.711Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-22607 / GitHub_M", "record": "CVE-2025-22607", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-24T15:48:55.671Z", "date_only": false, "value": "2025-01-24T15:48:55.671801Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113884118072683940", "record": "GHSA-8w24-gfgq-jg72", "field": "creation_timestamp", "uuid": "f0c18b7a-b19b-4a61-a076-0ad7bd75ee06", "url": "https://infosec.exchange/users/cve/statuses/113884118072683940"}, {"timestamp": "2025-01-24T15:58:02.063Z", "date_only": false, "value": "2025-01-24T15:58:02.063722Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-22607 / CISA-ADP", "record": "CVE-2025-22607", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-24T15:58:23.987Z", "date_only": false, "value": "2025-01-24T15:58:23.987Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-22607", "record": "CVE-2025-22607", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-24T15:58:23.987Z", "date_only": false, "value": "2025-01-24T15:58:23.987Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-22607 / CISA-ADP", "record": "CVE-2025-22607", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-24T16:04:36Z", "date_only": false, "value": "2025-01-24T16:04:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2916", "record": "GHSA-8W24-GFGQ-JG72", "field": "creation_timestamp", "uuid": "0d7cd688-1081-454a-a2f8-40f66b5bb42c", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22607\n\ud83d\udd39 Description: Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to fetch the details page for any GitHub / GitLab configuration on a Coolify instance by only knowing the UUID of the model. This exposes the \"client id\", \"client secret\" and \"webhook secret.\" Version 4.0.0-beta.361 fixes this issue.\n\ud83d\udccf Published: 2025-01-24T15:45:03.711Z\n\ud83d\udccf Modified: 2025-01-24T15:58:23.987Z\n\ud83d\udd17 References:\n1. https://github.com/coollabsio/coolify/security/advisories/GHSA-8w24-gfgq-jg72", "url": "https://t.me/DarkWebInformer_CVEAlerts/2916"}]}