{"metadata": {"vulnerability": "GHSA-9v2v-jxvw-52rq", "count": 8, "kinds": {"milestone": 2, "sighting": 2, "kev": 0, "other": 4}}, "data": [{"timestamp": "2025-01-10T15:11:08.883Z", "date_only": false, "value": "2025-01-10T15:11:08.883Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-23044", "record": "CVE-2025-23044", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-20T15:43:23.882Z", "date_only": false, "value": "2025-01-20T15:43:23.882Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-23044", "record": "CVE-2025-23044", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-20T15:43:23.882Z", "date_only": false, "value": "2025-01-20T15:43:23.882Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-23044 / GitHub_M", "record": "CVE-2025-23044", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-20T15:49:35.574Z", "date_only": false, "value": "2025-01-20T15:49:35.574629Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113861471440807384", "record": "GHSA-9v2v-jxvw-52rq", "field": "creation_timestamp", "uuid": "037d788e-00b0-4e34-8505-3afab45d1794", "url": "https://infosec.exchange/users/cve/statuses/113861471440807384"}, {"timestamp": "2025-01-20T16:01:44Z", "date_only": false, "value": "2025-01-20T16:01:44.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2366", "record": "GHSA-9V2V-JXVW-52RQ", "field": "creation_timestamp", "uuid": "87f60c19-c8d2-45c3-93e9-4b5a78e7afc3", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23044\n\ud83d\udd39 Description: PwnDoc is a penetration test report generator. There is no CSRF protection in pwndoc, allowing attackers to send requests on a logged-in user's behalf. This includes GET and POST requests due to the missing SameSite= attribute on cookies and the ability to refresh cookies. Commit 14acb704891245bf1703ce6296d62112e85aa995 patches the issue.\n\ud83d\udccf Published: 2025-01-20T15:43:23.882Z\n\ud83d\udccf Modified: 2025-01-20T15:43:23.882Z\n\ud83d\udd17 References:\n1. https://github.com/pwndoc/pwndoc/security/advisories/GHSA-9v2v-jxvw-52rq\n2. https://github.com/pwndoc/pwndoc/commit/14acb704891245bf1703ce6296d62112e85aa995", "url": "https://t.me/DarkWebInformer_CVEAlerts/2366"}, {"timestamp": "2025-01-21T14:43:59.618Z", "date_only": false, "value": "2025-01-21T14:43:59.618950Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-23044 / CISA-ADP", "record": "CVE-2025-23044", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-12T20:41:20.188Z", "date_only": false, "value": "2025-02-12T20:41:20.188Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-23044", "record": "CVE-2025-23044", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T20:41:20.188Z", "date_only": false, "value": "2025-02-12T20:41:20.188Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-23044 / CISA-ADP", "record": "CVE-2025-23044", "field": "containers.adp.0.providerMetadata.dateUpdated"}]}