{"metadata": {"vulnerability": "cve-2025-27507", "count": 33, "kinds": {"milestone": 5, "sighting": 15, "kev": 0, "other": 13}}, "data": [{"timestamp": "2025-02-26T18:11:52.305Z", "date_only": false, "value": "2025-02-26T18:11:52.305Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-27507", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-04T16:43:22.529Z", "date_only": false, "value": "2025-03-04T16:43:22.529Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-27507", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-04T16:43:22.529Z", "date_only": false, "value": "2025-03-04T16:43:22.529Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-27507", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-04T16:43:56Z", "date_only": false, "value": "2025-03-04T16:43:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F3GH-529W-V32X", "record": "GHSA-F3GH-529W-V32X", "field": "published"}, {"timestamp": "2025-03-04T17:05:51.380Z", "date_only": false, "value": "2025-03-04T17:05:51.380213Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-27507", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-04T17:05:51.380Z", "date_only": false, "value": "2025-03-04T17:05:51.380213Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27507", "record": "FKIE_CVE-2025-27507", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-04T17:15:20Z", "date_only": false, "value": "2025-03-04T17:15:20Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F3GH-529W-V32X", "record": "GHSA-F3GH-529W-V32X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-04T17:15:20.360Z", "date_only": false, "value": "2025-03-04T17:15:20.360", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27507", "record": "FKIE_CVE-2025-27507", "field": "published"}, {"timestamp": "2025-03-04T18:31:35Z", "date_only": false, "value": "2025-03-04T18:31:35.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1O5z91QcHmrjRz26b3O2xs57dQF3nVw-sSDMEN0aU64nGRA", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "841cbdba-c96b-4e71-8ba7-be69f5a5e4a2"}, {"timestamp": "2025-03-04T19:48:36.054Z", "date_only": false, "value": "2025-03-04T19:48:36.054331Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114105890556873873", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "13a43d98-c4de-4d9a-9553-de75f25b1ade", "url": "https://mastodon.social/users/CyberSignaler/statuses/114105890556873873"}, {"timestamp": "2025-03-04T20:01:42Z", "date_only": false, "value": "2025-03-04T20:01:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/19527", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "d3be833b-74f1-492a-b674-f81959220ff2", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27507 - Zitadel Insecure Direct Object Reference (IDOR) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27507 \nPublished : March 4, 2025, 5:15 p.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : The open-source identity infrastructure software Zitadel allows administrators to disable the user self-registration. ZITADEL's Admin API contains Insecure Direct Object Reference (IDOR) vulnerabilities that allow authenticated users, without specific IAM roles, to modify sensitive settings. While several endpoints are affected, the most critical vulnerability lies in the ability to manipulate LDAP configurations. Customers who do not utilize LDAP for authentication are not at risk from the most severe aspects of this vulnerability. However, upgrading to the patched version to address all identified issues is strongly recommended. This vulnerability is fixed in 2.71.0, 2.70.1, ,2.69.4, 2.68.4, 2.67.8, 2.66.11, 2.65.6, 2.64.5, and 2.63.8. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/19527"}, {"timestamp": "2025-03-05T00:00:13.830Z", "date_only": false, "value": "2025-03-05T00:00:13.830380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljlodbotcn2v", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "49ef56b0-7dfe-4285-b098-600c7336cd22", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljlodbotcn2v"}, {"timestamp": "2025-03-05T12:00:10.712Z", "date_only": false, "value": "2025-03-05T12:00:10.712762Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljmwkpptqd2c", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "42bae0b9-e4af-437e-92ab-28d08e2dd4df", "url": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljmwkpptqd2c"}, {"timestamp": "2025-03-11T17:18:47Z", "date_only": false, "value": "2025-03-11T17:18:47Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F3GH-529W-V32X", "record": "GHSA-F3GH-529W-V32X", "field": "modified"}, {"timestamp": "2025-03-12T21:11:10.878Z", "date_only": false, "value": "2025-03-12T21:11:10.878Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-27507", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-12T21:11:10.878Z", "date_only": false, "value": "2025-03-12T21:11:10.878Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-27507", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-13T00:00:00Z", "date_only": false, "value": "2025-03-13T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-01T12:38:04Z", "date_only": false, "value": "2025-04-01T12:38:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/suboxone_chatroom/7471", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "50170635-fdab-45f3-8827-63a9fc6edd96", "content": "\ud83d\udee1CVE-2025-27507(CVSS 9.0): Zitadel Insecure Direct Object Reference (IDOR) Vulnerability\n\n\ud83d\udc7bDork:\nHUNTER : http://product.name=\"Zitadel\"\n\n\u26a0\ufe0fRefer:https://securityonline.info/cve-2025-27507-cvss-9-0-zitadel-users-at-risk-of-account-takeover/\n\n\ud83d\udda5https://github.com/zitadel/zitadel/security/advisories/GHSA-f3gh-529w-v32x\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "url": "https://t.me/suboxone_chatroom/7471"}, {"timestamp": "2025-05-28T20:30:10.732Z", "date_only": false, "value": "2025-05-28T20:30:10.732847Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lqb2a3pcyc2l", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "7f354052-007d-4e47-b598-b17aa2632ac1", "url": "https://bsky.app/profile/bolhasec.com/post/3lqb2a3pcyc2l"}, {"timestamp": "2025-08-18T13:31:24Z", "date_only": false, "value": "2025-08-18T13:31:24.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "df512b23-e15d-46b2-85a7-58260aa88743"}, {"timestamp": "2025-08-19T02:47:46Z", "date_only": false, "value": "2025-08-19T02:47:46.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/4937e86f-f5bd-4d09-8bda-88a7440077f3", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "64855908-6842-48e8-bd99-676643de113d"}, {"timestamp": "2026-06-17T09:03:43.580Z", "date_only": false, "value": "2026-06-17T09:03:43.580", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-27507", "record": "FKIE_CVE-2025-27507", "field": "lastModified"}, {"timestamp": "2026-07-09T03:00:09.112Z", "date_only": false, "value": "2026-07-09T03:00:09.112909Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1611", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "5a70d60e-597c-4f61-8c73-6a0c3e28f7ac", "url": "https://t.me/brutsecurity/1611"}, {"timestamp": "2026-07-10T00:00:32.681Z", "date_only": false, "value": "2026-07-10T00:00:32.681365Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1611", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "1e09d8ce-4b69-483a-9967-9360a2f88d58", "url": "https://t.me/brutsecurity/1611"}, {"timestamp": "2026-07-11T14:00:04.409Z", "date_only": false, "value": "2026-07-11T14:00:04.409128Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1611", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "8a11ae13-54ff-48af-95aa-95c03053b50c", "url": "https://t.me/brutsecurity/1611"}, {"timestamp": "2026-07-12T00:00:48.151Z", "date_only": false, "value": "2026-07-12T00:00:48.151149Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/brutsecurity/1611", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "a9bac576-06f4-46c5-908e-496dbc166882", "url": "https://t.me/brutsecurity/1611"}, {"timestamp": "2026-08-04T13:00:08.937Z", "date_only": false, "value": "2026-08-04T13:00:08.937505Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/347", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "725859b2-1d09-4bde-b717-436761c71178", "url": "https://t.me/purp_sec/347"}, {"timestamp": "2026-08-05T00:00:25.952Z", "date_only": false, "value": "2026-08-05T00:00:25.952316Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/347", "record": "CVE-2025-27507", "field": "creation_timestamp", "uuid": "4e2454a0-e1d0-4aca-9bf0-2bada3f6136b", "url": "https://t.me/purp_sec/347"}, {"timestamp": "2026-09-20T21:29:12Z", "date_only": false, "value": "2026-09-20T21:29:12Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:29:12Z", "date_only": false, "value": "2026-09-20T21:29:12Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2025:14889-1", "record": "OPENSUSE-SU-2025:14889-1", "field": "document.tracking.current_release_date"}]}