{"metadata": {"vulnerability": "cve-2025-0020", "count": 23, "kinds": {"milestone": 5, "sighting": 7, "kev": 0, "other": 11}}, "data": [{"timestamp": "2024-11-06T08:36:01.058Z", "date_only": false, "value": "2024-11-06T08:36:01.058Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-0020", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-14T07:54:57.843Z", "date_only": false, "value": "2025-05-14T07:54:57.843Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-0020", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-05-14T08:15:33Z", "date_only": false, "value": "2025-05-14T08:15:33Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F95R-2GGC-W963", "record": "GHSA-F95R-2GGC-W963", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-14T08:15:33.863Z", "date_only": false, "value": "2025-05-14T08:15:33.863", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0020", "record": "FKIE_CVE-2025-0020", "field": "published"}, {"timestamp": "2025-05-14T08:31:22Z", "date_only": false, "value": "2025-05-14T08:31:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16294", "record": "CVE-2025-0020", "field": "creation_timestamp", "uuid": "8eeb8edd-1a0e-4471-9615-02dbe073f0a3", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0020\n\ud83d\udd25 CVSS Score: 7.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/U:Amber)\n\ud83d\udd39 Description: Violation of Secure Design Principles, Hidden Functionality, Incorrect Provision of Specified Functionality vulnerability in ArcGIS (Authentication) allows Privilege Abuse, Manipulating Hidden Fields, Configuration/Environment Manipulation.\n\nThe ArcGIS client_credentials OAuth 2.0 API implementation does not adhere to the RFC/standards; This hidden (known and by-design, but undocumented) functionality enables a requestor (referred to as client in RFC 6749) to request an, undocumented, custom token expiration from ArcGIS (referred to as authorization server in RFC 6749).\n\ud83d\udccf Published: 2025-05-14T07:54:57.843Z\n\ud83d\udccf Modified: 2025-05-14T08:06:45.827Z\n\ud83d\udd17 References:\n1. https://www.vulsec.org/advisories\n2. https://developers.arcgis.com/documentation/security-and-authentication/", "url": "https://t.me/DarkWebInformer_CVEAlerts/16294"}, {"timestamp": "2025-05-14T09:17:42.344Z", "date_only": false, "value": "2025-05-14T09:17:42.344563Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp4o4q5plv2p", "record": "CVE-2025-0020", "field": "creation_timestamp", "uuid": "5d710ca0-d69a-44ad-ab94-afb561ccbbc3", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp4o4q5plv2p"}, {"timestamp": "2025-05-14T09:19:53.079Z", "date_only": false, "value": "2025-05-14T09:19:53.079846Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4o37o64tc2", "record": "CVE-2025-0020", "field": "creation_timestamp", "uuid": "d48b6c3d-2930-437f-b103-d6168b7b1862", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp4o37o64tc2"}, {"timestamp": "2025-05-14T09:30:25Z", "date_only": false, "value": "2025-05-14T09:30:25Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F95R-2GGC-W963", "record": "GHSA-F95R-2GGC-W963", "field": "published"}, {"timestamp": "2025-05-14T09:30:25Z", "date_only": false, "value": "2025-05-14T09:30:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F95R-2GGC-W963", "record": "GHSA-F95R-2GGC-W963", "field": "modified"}, {"timestamp": "2025-05-14T12:38:46.971Z", "date_only": false, "value": "2025-05-14T12:38:46.971854Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114506224515931609", "record": "CVE-2025-0020", "field": "creation_timestamp", "uuid": "db745931-71ff-4f1e-ba2f-cb80bc11ecec", "url": "https://infosec.exchange/users/cR0w/statuses/114506224515931609"}, {"timestamp": "2025-05-15T22:00:00Z", "date_only": false, "value": "2025-05-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1084", "record": "WID-SEC-W-2025-1084", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-05-15T22:00:00Z", "date_only": false, "value": "2025-05-15T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1084", "record": "WID-SEC-W-2025-1084", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-05-15T22:00:00Z", "date_only": false, "value": "2025-05-15T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1084", "record": "WID-SEC-W-2025-1084", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-05-16T17:44:02.099Z", "date_only": false, "value": "2025-05-16T17:44:02.099Z", "kind": "other", "label": "Rejected", "source": "cvelistv5", "record": "cve-2025-0020", "field": "cveMetadata.dateRejected"}, {"timestamp": "2025-05-17T03:03:05.914Z", "date_only": false, "value": "2025-05-17T03:03:05.914967Z", "kind": "sighting", "label": "Seen", "source": "https://schleuss.online/users/vulnbot/statuses/114520947732774575", "record": "CVE-2025-0020", "field": "creation_timestamp", "uuid": "74f2299d-63ca-4129-a6ec-f31781ac5f57", "url": "https://schleuss.online/users/vulnbot/statuses/114520947732774575"}, {"timestamp": "2025-05-17T03:23:31.818Z", "date_only": false, "value": "2025-05-17T03:23:31.818266Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lpdlq66hyb24", "record": "CVE-2025-0020", "field": "creation_timestamp", "uuid": "3ccde91b-b42b-4ee5-9ba8-16f9d813ff92", "url": "https://bsky.app/profile/nimblenerd.social/post/3lpdlq66hyb24"}, {"timestamp": "2025-05-18T09:29:36.427Z", "date_only": false, "value": "2025-05-18T09:29:36.427697Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpgqnoq3rc2c", "record": "CVE-2025-0020", "field": "creation_timestamp", "uuid": "ef75ddda-1b38-41fd-b225-0a87e01be7ad", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lpgqnoq3rc2c"}, {"timestamp": "2025-05-18T22:00:00Z", "date_only": false, "value": "2025-05-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1084", "record": "WID-SEC-W-2025-1084", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-05-18T22:00:00Z", "date_only": false, "value": "2025-05-18T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1084", "record": "WID-SEC-W-2025-1084", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-05-19T07:27:26.800Z", "date_only": false, "value": "2025-05-19T07:27:26.800+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1084", "record": "WID-SEC-W-2025-1084", "field": "document.tracking.generator.date"}, {"timestamp": "2025-05-19T19:07:02.724Z", "date_only": false, "value": "2025-05-19T19:07:02.724Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-0020", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-19T19:07:02.724Z", "date_only": false, "value": "2025-05-19T19:07:02.724Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Esri", "record": "cve-2025-0020", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-19T19:15:47.690Z", "date_only": false, "value": "2025-05-19T19:15:47.690", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0020", "record": "FKIE_CVE-2025-0020", "field": "lastModified"}]}