{"metadata": {"vulnerability": "cve-2025-23208", "count": 28, "kinds": {"milestone": 6, "sighting": 5, "kev": 0, "other": 17}}, "data": [{"timestamp": "2025-01-13T17:15:41.050Z", "date_only": false, "value": "2025-01-13T17:15:41.050Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-23208", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-01-17T21:57:02Z", "date_only": false, "value": "2025-01-17T21:57:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/project-zot/zot/security/advisories/GHSA-c9p4-xwr9-rfhx", "record": "CVE-2025-23208", "field": "creation_timestamp", "uuid": "0e51f82e-597b-4f72-abd4-f31eafb87a79", "url": "https://github.com/project-zot/zot/security/advisories/GHSA-c9p4-xwr9-rfhx"}, {"timestamp": "2025-01-17T22:02:26Z", "date_only": false, "value": "2025-01-17T22:02:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C9P4-XWR9-RFHX", "record": "GHSA-C9P4-XWR9-RFHX", "field": "published"}, {"timestamp": "2025-01-17T22:24:09.406Z", "date_only": false, "value": "2025-01-17T22:24:09.406Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-23208", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-01-17T22:24:09.406Z", "date_only": false, "value": "2025-01-17T22:24:09.406Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-23208", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-17T22:25:32.630Z", "date_only": false, "value": "2025-01-17T22:25:32.630393Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113846041447410284", "record": "CVE-2025-23208", "field": "creation_timestamp", "uuid": "44c85a8f-9712-4390-98d2-a7d80ac00e2a", "url": "https://infosec.exchange/users/cve/statuses/113846041447410284"}, {"timestamp": "2025-01-17T22:57:00Z", "date_only": false, "value": "2025-01-17T22:57:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2235", "record": "CVE-2025-23208", "field": "creation_timestamp", "uuid": "a24065d0-1840-4af1-ac9b-abaf870eb8f9", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23208\n\ud83d\udd39 Description: zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database (meta.db) is an append-list so group revocations/removals are ignored in the API. SetUserGroups is alled on login, but instead of replacing the group memberships, they are appended. This may be due to some conflict with the group definitions in the config file, but that wasn't obvious to me if it were the case. Any Zot configuration that relies on group-based authorization will not respect group remove/revocation by an IdP. This issue has been addressed in version 2.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-17T22:24:09.406Z\n\ud83d\udccf Modified: 2025-01-17T22:24:09.406Z\n\ud83d\udd17 References:\n1. https://github.com/project-zot/zot/security/advisories/GHSA-c9p4-xwr9-rfhx\n2. https://github.com/project-zot/zot/commit/002ac62d8a15bf0cba010b3ba7bde86f9837b613\n3. https://github.com/project-zot/zot/blob/5e30fec65c49e3139907e2819ccb39b2e3bd784e/pkg/meta/boltdb/boltdb.go#L1665", "url": "https://t.me/DarkWebInformer_CVEAlerts/2235"}, {"timestamp": "2025-01-17T23:15:13Z", "date_only": false, "value": "2025-01-17T23:15:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C9P4-XWR9-RFHX", "record": "GHSA-C9P4-XWR9-RFHX", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-01-17T23:15:13.107Z", "date_only": false, "value": "2025-01-17T23:15:13.107", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23208", "record": "FKIE_CVE-2025-23208", "field": "published"}, {"timestamp": "2025-01-17T23:16:12.639Z", "date_only": false, "value": "2025-01-17T23:16:12.639647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwgfarhc2n", "record": "CVE-2025-23208", "field": "creation_timestamp", "uuid": "8c46889e-412f-4ac3-9cbe-5a7301834627", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfxwgfarhc2n"}, {"timestamp": "2025-01-18T01:09:53Z", "date_only": false, "value": "2025-01-18T01:09:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/15751", "record": "CVE-2025-23208", "field": "creation_timestamp", "uuid": "cc4499d6-4a08-4b00-98c2-070c114d5c1f", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23208 - Zot OCI Image Registry Group Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23208 \nPublished : Jan. 17, 2025, 11:15 p.m. | 38\u00a0minutes ago \nDescription : zot is a production-ready vendor-neutral OCI image registry. The group data stored for users in the boltdb database (meta.db) is an append-list so group revocations/removals are ignored in the API. SetUserGroups is alled on login, but instead of replacing the group memberships, they are appended. This may be due to some conflict with the group definitions in the config file, but that wasn't obvious to me if it were the case. Any Zot configuration that relies on group-based authorization will not respect group remove/revocation by an IdP. This issue has been addressed in version 2.1.2. All users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/15751"}, {"timestamp": "2025-01-21T18:31:05Z", "date_only": false, "value": "2025-01-21T18:31:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C9P4-XWR9-RFHX", "record": "GHSA-C9P4-XWR9-RFHX", "field": "modified"}, {"timestamp": "2025-01-22T14:26:14.576Z", "date_only": false, "value": "2025-01-22T14:26:14.576260Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-23208", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-22T14:26:14.576Z", "date_only": false, "value": "2025-01-22T14:26:14.576260Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23208", "record": "FKIE_CVE-2025-23208", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-22T14:27:12.141Z", "date_only": false, "value": "2025-01-22T14:27:12.141Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-23208", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-22T14:27:12.141Z", "date_only": false, "value": "2025-01-22T14:27:12.141Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-23208", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14710-1", "record": "OPENSUSE-SU-2025:14710-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14710-1", "record": "OPENSUSE-SU-2025:14710-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14710-1", "record": "OPENSUSE-SU-2025:14710-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14710-1", "record": "OPENSUSE-SU-2025:14710-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-30T14:03:37Z", "date_only": false, "value": "2025-01-30T14:03:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:0297-1", "record": "SUSE-SU-2025:0297-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-01-30T14:03:37Z", "date_only": false, "value": "2025-01-30T14:03:37Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:0297-1", "record": "SUSE-SU-2025:0297-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-01-30T14:03:37Z", "date_only": false, "value": "2025-01-30T14:03:37Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0297-1", "record": "SUSE-SU-2025:0297-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-30T14:03:37Z", "date_only": false, "value": "2025-01-30T14:03:37Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:0297-1", "record": "SUSE-SU-2025:0297-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-01-30T14:03:37Z", "date_only": false, "value": "2025-01-30T14:03:37Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:0297-1", "record": "SUSE-SU-2025:0297-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T08:52:39Z", "date_only": false, "value": "2026-06-17T08:52:39.000", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23208", "record": "FKIE_CVE-2025-23208", "field": "lastModified"}, {"timestamp": "2026-09-20T21:25:59Z", "date_only": false, "value": "2026-09-20T21:25:59Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14710-1", "record": "OPENSUSE-SU-2025:14710-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:25:59Z", "date_only": false, "value": "2026-09-20T21:25:59Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14710-1", "record": "OPENSUSE-SU-2025:14710-1", "field": "document.tracking.current_release_date"}]}