{"metadata": {"vulnerability": "cve-2025-1211", "count": 23, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1211", "record": "MSRC_CVE-2025-1211", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-10T19:59:44.641Z", "date_only": false, "value": "2025-02-10T19:59:44.641Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-1211", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-11T05:00:00.994Z", "date_only": false, "value": "2025-02-11T05:00:00.994Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-1211", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-11T05:05:10.545Z", "date_only": false, "value": "2025-02-11T05:05:10.545493Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113983508330316842", "record": "CVE-2025-1211", "field": "creation_timestamp", "uuid": "ab022588-a91b-4879-b020-695de5a12033", "url": "https://infosec.exchange/users/cve/statuses/113983508330316842"}, {"timestamp": "2025-02-11T05:15:14Z", "date_only": false, "value": "2025-02-11T05:15:14Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VQ52-99R9-H5PW", "record": "GHSA-VQ52-99R9-H5PW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-11T05:15:14.013Z", "date_only": false, "value": "2025-02-11T05:15:14.013", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1211", "record": "FKIE_CVE-2025-1211", "field": "published"}, {"timestamp": "2025-02-11T05:15:58.873Z", "date_only": false, "value": "2025-02-11T05:15:58.873692Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuvpsipft27", "record": "CVE-2025-1211", "field": "creation_timestamp", "uuid": "030b0e17-c005-4e98-8191-92ff72909c63", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhuvpsipft27"}, {"timestamp": "2025-02-11T06:30:27Z", "date_only": false, "value": "2025-02-11T06:30:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VQ52-99R9-H5PW", "record": "GHSA-VQ52-99R9-H5PW", "field": "published"}, {"timestamp": "2025-02-11T07:18:57Z", "date_only": false, "value": "2025-02-11T07:18:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17657", "record": "CVE-2025-1211", "field": "creation_timestamp", "uuid": "3a39f640-fd85-489b-94df-9af8398a5b84", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1211 - Hackney SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1211 \nPublished : Feb. 11, 2025, 5:15 a.m. | 40\u00a0minutes ago \nDescription : Versions of the package hackney from 0.0.0 are vulnerable to Server-side Request Forgery (SSRF) due to improper parsing of URLs by URI built-in module and hackey. Given the URL , the URI function will parse and see the host as 127.0.0.1 (which is correct), and hackney will refer the host as 127.2.2.2/.   \nThis vulnerability can be exploited when users rely on the URL function for host checking. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17657"}, {"timestamp": "2025-02-11T08:19:44.635Z", "date_only": false, "value": "2025-02-11T08:19:44.635156Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhv7yetsov2q", "record": "CVE-2025-1211", "field": "creation_timestamp", "uuid": "4ce8a2db-878e-49bf-a6ec-cb32c657d343", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhv7yetsov2q"}, {"timestamp": "2025-02-11T15:54:20.603Z", "date_only": false, "value": "2025-02-11T15:54:20.603460Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-1211", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-11T15:54:20.603Z", "date_only": false, "value": "2025-02-11T15:54:20.603460Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1211", "record": "FKIE_CVE-2025-1211", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-11T15:54:56.977Z", "date_only": false, "value": "2025-02-11T15:54:56.977Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-1211", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-14T10:01:38Z", "date_only": false, "value": "2025-02-14T10:01:38.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/EaoF4DzjzoRVuHEevdLYNxAAp2wtCXXuVjAq_5CtXsUIoDeY", "record": "CVE-2025-1211", "field": "creation_timestamp", "uuid": "57ee7b62-d579-4f9f-afb1-822d50440515"}, {"timestamp": "2025-02-20T16:41:45Z", "date_only": false, "value": "2025-02-20T16:41:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VQ52-99R9-H5PW", "record": "GHSA-VQ52-99R9-H5PW", "field": "modified"}, {"timestamp": "2025-03-16T12:48:56.614Z", "date_only": false, "value": "2025-03-16T12:48:56.614Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-1211", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-16T12:48:56.614Z", "date_only": false, "value": "2025-03-16T12:48:56.614Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / snyk", "record": "cve-2025-1211", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-16T13:49:26Z", "date_only": false, "value": "2025-03-16T13:49:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7712", "record": "CVE-2025-1211", "field": "creation_timestamp", "uuid": "8be7a164-02d0-44e4-9557-f90f9360a367", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1211\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L/E:P)\n\ud83d\udd39 Description: Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery (SSRF) due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://127.0.0.1?@127.2.2.2/, the URI function will parse and see the host as 127.0.0.1 (which is correct), and hackney will refer the host as 127.2.2.2/. This vulnerability can be exploited when users rely on the URL function for host checking.\n\ud83d\udccf Published: 2025-02-11T05:00:00.994Z\n\ud83d\udccf Modified: 2025-03-16T12:48:56.614Z\n\ud83d\udd17 References:\n1. https://security.snyk.io/vuln/SNYK-HEX-HACKNEY-6516131\n2. https://gist.github.com/snoopysecurity/996de09ec0cfd0ebdcfdda8ff515deb1\n3. https://www.blackhat.com/docs/us-17/thursday/us-17-Tsai-A-New-Era-Of-SSRF-Exploiting-URL-Parser-In-Trending-Programming-Languages.pdf\n4. https://github.com/benoitc/hackney/commit/9594ce58fabd32cd897fc28fae937694515a3d4a", "url": "https://t.me/DarkWebInformer_CVEAlerts/7712"}, {"timestamp": "2025-09-04T01:58:16Z", "date_only": false, "value": "2025-09-04T01:58:16.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1211", "record": "MSRC_CVE-2025-1211", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-02-18T15:03:54Z", "date_only": false, "value": "2026-02-18T15:03:54.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1211", "record": "MSRC_CVE-2025-1211", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-02-18T15:03:54Z", "date_only": false, "value": "2026-02-18T15:03:54.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1211", "record": "MSRC_CVE-2025-1211", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-21T01:32:19.059Z", "date_only": false, "value": "2026-02-21T01:32:19.059Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-1211", "record": "MSRC_CVE-2025-1211", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T08:38:36.677Z", "date_only": false, "value": "2026-06-17T08:38:36.677", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1211", "record": "FKIE_CVE-2025-1211", "field": "lastModified"}]}