{"metadata": {"vulnerability": "cve-2025-25589", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-02-07T00:00:00Z", "date_only": false, "value": "2025-02-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-25589", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-18T00:00:00Z", "date_only": false, "value": "2025-03-18T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-25589", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-18T15:17:17.130Z", "date_only": false, "value": "2025-03-18T15:17:17.130Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2025-25589", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-18T16:15:27Z", "date_only": false, "value": "2025-03-18T16:15:27Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PFG4-R8VJ-QQM4", "record": "GHSA-PFG4-R8VJ-QQM4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-18T16:15:27.200Z", "date_only": false, "value": "2025-03-18T16:15:27.200", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25589", "record": "FKIE_CVE-2025-25589", "field": "published"}, {"timestamp": "2025-03-18T17:44:03Z", "date_only": false, "value": "2025-03-18T17:44:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/20570", "record": "CVE-2025-25589", "field": "creation_timestamp", "uuid": "8df4bc4b-f155-433f-b519-a6074ba1f728", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25589 - Yimioa XML External Entity Injection (XXE) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25589 \nPublished : March 18, 2025, 4:15 p.m. | 16\u00a0minutes ago \nDescription : An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/20570"}, {"timestamp": "2025-03-18T18:30:49Z", "date_only": false, "value": "2025-03-18T18:30:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PFG4-R8VJ-QQM4", "record": "GHSA-PFG4-R8VJ-QQM4", "field": "published"}, {"timestamp": "2025-03-18T20:18:34.795Z", "date_only": false, "value": "2025-03-18T20:18:34.795060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihykwyv26", "record": "CVE-2025-25589", "field": "creation_timestamp", "uuid": "9543432c-d79d-47b8-8582-1b23e897de04", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkoihykwyv26"}, {"timestamp": "2025-03-19T18:23:36.665Z", "date_only": false, "value": "2025-03-19T18:23:36.665435Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-25589", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-03-19T18:23:36.665Z", "date_only": false, "value": "2025-03-19T18:23:36.665435Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25589", "record": "FKIE_CVE-2025-25589", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-19T21:30:52Z", "date_only": false, "value": "2025-03-19T21:30:52Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PFG4-R8VJ-QQM4", "record": "GHSA-PFG4-R8VJ-QQM4", "field": "modified"}, {"timestamp": "2025-03-21T13:35:19.864Z", "date_only": false, "value": "2025-03-21T13:35:19.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-25589", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-21T13:35:19.864Z", "date_only": false, "value": "2025-03-21T13:35:19.864Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-25589", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-21T14:19:16Z", "date_only": false, "value": "2025-03-21T14:19:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8343", "record": "CVE-2025-25589", "field": "creation_timestamp", "uuid": "257359d2-aa1d-46ae-882d-2e68ad570de3", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-25589\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file.\n\ud83d\udccf Published: 2025-03-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-21T13:35:19.864Z\n\ud83d\udd17 References:\n1. https://gitee.com/r1bbit/yimioa/issues/IBI81R", "url": "https://t.me/DarkWebInformer_CVEAlerts/8343"}, {"timestamp": "2026-06-17T09:00:55.470Z", "date_only": false, "value": "2026-06-17T09:00:55.470", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25589", "record": "FKIE_CVE-2025-25589", "field": "lastModified"}]}