{"metadata": {"vulnerability": "cve-2025-1540", "count": 26, "kinds": {"milestone": 7, "sighting": 4, "kev": 0, "other": 15}}, "data": [{"timestamp": "2025-02-11T23:00:00Z", "date_only": false, "value": "2025-02-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0354", "record": "WID-SEC-W-2025-0354", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-11T23:00:00Z", "date_only": false, "value": "2025-02-11T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0354", "record": "WID-SEC-W-2025-0354", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-11T23:00:00Z", "date_only": false, "value": "2025-02-11T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0354", "record": "WID-SEC-W-2025-0354", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-02-21T09:02:14.816Z", "date_only": false, "value": "2025-02-21T09:02:14.816Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-1540", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-05T23:00:00Z", "date_only": false, "value": "2025-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0354", "record": "WID-SEC-W-2025-0354", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-03-05T23:00:00Z", "date_only": false, "value": "2025-03-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0354", "record": "WID-SEC-W-2025-0354", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-03-06T08:31:07.791Z", "date_only": false, "value": "2025-03-06T08:31:07.791Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-1540", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-06T08:31:07.791Z", "date_only": false, "value": "2025-03-06T08:31:07.791Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitLab", "record": "cve-2025-1540", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-06T09:15:00Z", "date_only": false, "value": "2025-03-06T09:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-1540", "record": "UBUNTU-CVE-2025-1540", "field": "published"}, {"timestamp": "2025-03-06T09:15:26Z", "date_only": false, "value": "2025-03-06T09:15:26Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6XR7-MV6Q-JX4Q", "record": "GHSA-6XR7-MV6Q-JX4Q", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-06T09:15:26.317Z", "date_only": false, "value": "2025-03-06T09:15:26.317", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1540", "record": "FKIE_CVE-2025-1540", "field": "published"}, {"timestamp": "2025-03-06T09:31:53Z", "date_only": false, "value": "2025-03-06T09:31:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6XR7-MV6Q-JX4Q", "record": "GHSA-6XR7-MV6Q-JX4Q", "field": "published"}, {"timestamp": "2025-03-06T09:31:53Z", "date_only": false, "value": "2025-03-06T09:31:53Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6XR7-MV6Q-JX4Q", "record": "GHSA-6XR7-MV6Q-JX4Q", "field": "modified"}, {"timestamp": "2025-03-06T09:37:53Z", "date_only": false, "value": "2025-03-06T09:37:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6659", "record": "CVE-2025-1540", "field": "creation_timestamp", "uuid": "b967de1b-85cb-4fcb-ae20-479476a9d8b4", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1540\n\ud83d\udd25 CVSS Score: 3.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances.\"\n\ud83d\udccf Published: 2025-03-06T08:31:07.791Z\n\ud83d\udccf Modified: 2025-03-06T08:31:07.791Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/512765\n2. https://about.gitlab.com/releases/2025/02/12/patch-release-gitlab-17-8-2-released/#saml-authentication-misconfigures-external-user-attribute", "url": "https://t.me/DarkWebInformer_CVEAlerts/6659"}, {"timestamp": "2025-03-06T09:40:14.992Z", "date_only": false, "value": "2025-03-06T09:40:14.992987Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljp77japzm2o", "record": "CVE-2025-1540", "field": "creation_timestamp", "uuid": "aa3309a1-cf05-4510-8d4d-b1614505ec70", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljp77japzm2o"}, {"timestamp": "2025-03-06T10:40:18.459Z", "date_only": false, "value": "2025-03-06T10:40:18.459+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0354", "record": "WID-SEC-W-2025-0354", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-06T11:20:04Z", "date_only": false, "value": "2025-03-06T11:20:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19690", "record": "CVE-2025-1540", "field": "creation_timestamp", "uuid": "8f892a00-82a8-4d46-b24b-7cc57faa9d0a", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1540 - GitLab External User Project Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1540 \nPublished : March 6, 2025, 9:15 a.m. | 46\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances.\" \nSeverity: 3.1 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19690"}, {"timestamp": "2025-03-06T16:28:45.786Z", "date_only": false, "value": "2025-03-06T16:28:45.786600Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-1540", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-06T16:28:45.786Z", "date_only": false, "value": "2025-03-06T16:28:45.786600Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1540", "record": "FKIE_CVE-2025-1540", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-06T16:29:08.261Z", "date_only": false, "value": "2025-03-06T16:29:08.261Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-1540", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-06T16:29:08.261Z", "date_only": false, "value": "2025-03-06T16:29:08.261Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-1540", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-08T04:34:09Z", "date_only": false, "value": "2025-03-08T04:34:09.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/dCBlXJynWGNff457vBpGpGGASxl-yHYYarQixY7W8ulAf7xB", "record": "CVE-2025-1540", "field": "creation_timestamp", "uuid": "1b74fea1-a8f8-4d07-9892-811333a3ef51"}, {"timestamp": "2025-03-10T08:14:55.268Z", "date_only": false, "value": "2025-03-10T08:14:55.268Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2025-1540", "record": "BIT-GITLAB-2025-1540", "field": "published"}, {"timestamp": "2025-10-24T05:16:29Z", "date_only": false, "value": "2025-10-24T05:16:29Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2025-1540", "record": "UBUNTU-CVE-2025-1540", "field": "modified"}, {"timestamp": "2026-06-17T08:39:20.153Z", "date_only": false, "value": "2026-06-17T08:39:20.153", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-1540", "record": "FKIE_CVE-2025-1540", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-GITLAB-2025-1540", "record": "BIT-GITLAB-2025-1540", "field": "modified"}]}