{"metadata": {"vulnerability": "cve-2025-25286", "count": 26, "kinds": {"milestone": 4, "sighting": 14, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-01-15T22:04:19Z", "date_only": false, "value": "2025-01-15T22:04:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MM6V-68QP-F9FW", "record": "GHSA-MM6V-68QP-F9FW", "field": "published"}, {"timestamp": "2025-02-06T17:13:33.121Z", "date_only": false, "value": "2025-02-06T17:13:33.121Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-25286", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-13T00:36:55.558Z", "date_only": false, "value": "2025-02-13T00:36:55.558Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-25286", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-13T00:36:55.558Z", "date_only": false, "value": "2025-02-13T00:36:55.558Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-25286", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T01:15:25Z", "date_only": false, "value": "2025-02-13T01:15:25Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MM6V-68QP-F9FW", "record": "GHSA-MM6V-68QP-F9FW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-13T01:15:25.280Z", "date_only": false, "value": "2025-02-13T01:15:25.280", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25286", "record": "FKIE_CVE-2025-25286", "field": "published"}, {"timestamp": "2025-02-13T02:48:41.683Z", "date_only": false, "value": "2025-02-13T02:48:41.683575Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113994296257127308", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "ac26be09-4fad-4354-b82b-c08a4ceede6a", "url": "https://mastodon.social/users/CyberSignaler/statuses/113994296257127308"}, {"timestamp": "2025-02-13T03:00:57Z", "date_only": false, "value": "2025-02-13T03:00:57.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/r090prh8PzjJEh682vcQnlDcJfJK4dwz44titdcQaapqPXQ", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "7061f16e-15d4-4e84-829e-3d42c07fe1ec"}, {"timestamp": "2025-02-13T04:25:09.913Z", "date_only": false, "value": "2025-02-13T04:25:09.913891Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhztsqu3xi2e", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "79420f9c-b270-4729-a9f9-5d5fe5f8d473", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhztsqu3xi2e"}, {"timestamp": "2025-02-13T04:36:58Z", "date_only": false, "value": "2025-02-13T04:36:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17960", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "3e488988-3c69-453e-8b7a-11ae10d4b3b5", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25286 - Crayfish/Homarus Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25286 \nPublished : Feb. 13, 2025, 1:15 a.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The issue has been patched in `islandora/crayfish:4.1.0`. Some workarounds are available. The exploit requires making a request against the Homarus's `/convert` endpoint; therefore, the ability to exploit is much reduced if the microservice is not directly accessible from the Internet, so: Prevent general access from the Internet from hitting Homarus. Alternatively or additionally, configure auth in Crayfish to be more strongly required, such that requests with `Authorization` headers that do not validate are rejected before the problematic CLI interpolation occurs. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17960"}, {"timestamp": "2025-02-13T15:07:56.475Z", "date_only": false, "value": "2025-02-13T15:07:56.475931Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-25286", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-13T15:07:56.475Z", "date_only": false, "value": "2025-02-13T15:07:56.475931Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25286", "record": "FKIE_CVE-2025-25286", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-13T15:08:05.551Z", "date_only": false, "value": "2025-02-13T15:08:05.551Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-25286", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-13T15:08:05.551Z", "date_only": false, "value": "2025-02-13T15:08:05.551Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-25286", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T15:25:26.715Z", "date_only": false, "value": "2025-02-13T15:25:26.715255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li2ypaz45c2t", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "624993ad-02d3-491d-a7f4-a2fc01da89f6", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li2ypaz45c2t"}, {"timestamp": "2025-02-13T16:49:25Z", "date_only": false, "value": "2025-02-13T16:49:25Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MM6V-68QP-F9FW", "record": "GHSA-MM6V-68QP-F9FW", "field": "modified"}, {"timestamp": "2025-02-13T17:30:57.044Z", "date_only": false, "value": "2025-02-13T17:30:57.044202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li37ptxyop2e", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "6ecfc3f9-ec04-45de-a9a3-1b747b102c23", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li37ptxyop2e"}, {"timestamp": "2025-02-14T00:00:28.033Z", "date_only": false, "value": "2025-02-14T00:00:28.033304Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li3viecofn2t", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "df30b52c-a3cc-40f5-92e8-49635e08e9d7", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3li3viecofn2t"}, {"timestamp": "2025-02-14T10:06:08Z", "date_only": false, "value": "2025-02-14T10:06:08.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/iIi3KzIjULUXGypju4KFbWF_wBXen_gNRgrYAEOt14MXqBOb", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "c2b24e7c-c7c3-4d01-9662-78b5c53bd251"}, {"timestamp": "2025-02-18T02:56:12.042Z", "date_only": false, "value": "2025-02-18T02:56:12.042683Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6ciuqw2e", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "59864ef8-47c9-4db9-8627-ecbb2a31c20b", "url": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6ciuqw2e"}, {"timestamp": "2025-02-18T02:56:12.609Z", "date_only": false, "value": "2025-02-18T02:56:12.609857Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6ckr2e2z", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "d089d537-b64e-48c8-9f90-8dcc6304ebf2", "url": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6ckr2e2z"}, {"timestamp": "2025-02-18T02:56:13.836Z", "date_only": false, "value": "2025-02-18T02:56:13.836675Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6dldfw2g", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "9474185c-cc26-4386-bdf8-7f04e500cb7b", "url": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6dldfw2g"}, {"timestamp": "2025-02-18T02:56:16.241Z", "date_only": false, "value": "2025-02-18T02:56:16.241844Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6gmskk2g", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "2034ef1b-e16f-4bdb-9d93-e7ca89909f80", "url": "https://bsky.app/profile/vulns.bsky.social/post/3ligb6gmskk2g"}, {"timestamp": "2025-08-26T13:26:34Z", "date_only": false, "value": "2025-08-26T13:26:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "b14a90aa-3305-46c2-a55b-724018c2dbbc"}, {"timestamp": "2026-05-28T14:03:30.606Z", "date_only": false, "value": "2026-05-28T14:03:30.606007Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmw6spufid26", "record": "CVE-2025-25286", "field": "creation_timestamp", "uuid": "9ff44d67-7ca4-4a7c-b397-5d0327149f9f", "url": "https://bsky.app/profile/hugovalters.bsky.social/post/3mmw6spufid26"}, {"timestamp": "2026-06-17T09:00:37.090Z", "date_only": false, "value": "2026-06-17T09:00:37.090", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25286", "record": "FKIE_CVE-2025-25286", "field": "lastModified"}]}