{"metadata": {"vulnerability": "ghsa-2237-5r9w-vm8j", "count": 3, "kinds": {"milestone": 1, "sighting": 1, "kev": 0, "other": 1}}, "data": [{"timestamp": "2025-02-07T20:50:20Z", "date_only": false, "value": "2025-02-07T20:50:20Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-2237-5r9w-vm8j", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-07T20:50:20Z", "date_only": false, "value": "2025-02-07T20:50:20Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-2237-5r9w-vm8j", "field": "modified"}, {"timestamp": "2025-02-07T21:03:02Z", "date_only": false, "value": "2025-02-07T21:03:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3829", "record": "GHSA-2237-5R9W-VM8J", "field": "creation_timestamp", "uuid": "20ab7ac5-532e-429e-acb3-8c6ee8606189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-2237-5r9w-vm8j\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ### Impact\n - Information that is restricted from viewing in the search results of site searches (\u203b) can still be viewed via the main text (a feature added in v1.8.0).\n     - Impact by version\n         - v1.8.0 ~ v1.8.3: It will be displayed in the text.\n         - v1.8.0 and earlier: It will not be displayed in the body of the text, but the title (frame name) will be displayed with a link.\n     - Target viewing restriction function\n         - Frame publishing function (private, limited publishing)\n         - IP Restriction Page\n         - Password setting page\n\n### Patches (fixed version)\n - Apply v1.8.4.\n\n### Workarounds\n - Remove the site search (e.g. hide frames).\u3002\n\n### References\nnone\n\ud83d\udccf Published: 2025-02-07T20:50:20Z\n\ud83d\udccf Modified: 2025-02-07T20:50:20Z\n\ud83d\udd17 References:\n1. https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-2237-5r9w-vm8j\n2. https://github.com/opensource-workshop/connect-cms", "url": "https://t.me/DarkWebInformer_CVEAlerts/3829", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-09T07:14:40.311Z", "anchors": {"origin": {"timestamp": "2025-02-07T20:50:20Z", "date_only": false, "value": "2025-02-07T20:50:20Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-2237-5r9w-vm8j", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-02-07T20:50:20Z", "date_only": false, "value": "2025-02-07T20:50:20Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-2237-5r9w-vm8j", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-02-07T21:03:02Z", "date_only": false, "value": "2025-02-07T21:03:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3829", "record": "GHSA-2237-5R9W-VM8J", "field": "creation_timestamp", "uuid": "20ab7ac5-532e-429e-acb3-8c6ee8606189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-2237-5r9w-vm8j\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ### Impact\n - Information that is restricted from viewing in the search results of site searches (\u203b) can still be viewed via the main text (a feature added in v1.8.0).\n     - Impact by version\n         - v1.8.0 ~ v1.8.3: It will be displayed in the text.\n         - v1.8.0 and earlier: It will not be displayed in the body of the text, but the title (frame name) will be displayed with a link.\n     - Target viewing restriction function\n         - Frame publishing function (private, limited publishing)\n         - IP Restriction Page\n         - Password setting page\n\n### Patches (fixed version)\n - Apply v1.8.4.\n\n### Workarounds\n - Remove the site search (e.g. hide frames).\u3002\n\n### References\nnone\n\ud83d\udccf Published: 2025-02-07T20:50:20Z\n\ud83d\udccf Modified: 2025-02-07T20:50:20Z\n\ud83d\udd17 References:\n1. https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-2237-5r9w-vm8j\n2. https://github.com/opensource-workshop/connect-cms", "url": "https://t.me/DarkWebInformer_CVEAlerts/3829", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 762.0, "hours": 0.21166666666666667, "days": 0.008819444444444444, "min_seconds": 762.0, "max_seconds": 762.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-07T20:50:20Z", "date_only": false, "value": "2025-02-07T20:50:20Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-2237-5r9w-vm8j", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-02-07T21:03:02Z", "date_only": false, "value": "2025-02-07T21:03:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3829", "record": "GHSA-2237-5R9W-VM8J", "field": "creation_timestamp", "uuid": "20ab7ac5-532e-429e-acb3-8c6ee8606189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-2237-5r9w-vm8j\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ### Impact\n - Information that is restricted from viewing in the search results of site searches (\u203b) can still be viewed via the main text (a feature added in v1.8.0).\n     - Impact by version\n         - v1.8.0 ~ v1.8.3: It will be displayed in the text.\n         - v1.8.0 and earlier: It will not be displayed in the body of the text, but the title (frame name) will be displayed with a link.\n     - Target viewing restriction function\n         - Frame publishing function (private, limited publishing)\n         - IP Restriction Page\n         - Password setting page\n\n### Patches (fixed version)\n - Apply v1.8.4.\n\n### Workarounds\n - Remove the site search (e.g. hide frames).\u3002\n\n### References\nnone\n\ud83d\udccf Published: 2025-02-07T20:50:20Z\n\ud83d\udccf Modified: 2025-02-07T20:50:20Z\n\ud83d\udd17 References:\n1. https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-2237-5r9w-vm8j\n2. https://github.com/opensource-workshop/connect-cms", "url": "https://t.me/DarkWebInformer_CVEAlerts/3829", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 55247060.311597, "hours": 15346.405642110278, "days": 639.4335684212615, "min_seconds": 55247060.311597, "max_seconds": 55247060.311597, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-07T20:50:20Z", "date_only": false, "value": "2025-02-07T20:50:20Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-2237-5r9w-vm8j", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-09T07:14:40.311Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 55246298.311597, "hours": 15346.19397544361, "days": 639.4247489768171, "min_seconds": 55246298.311597, "max_seconds": 55246298.311597, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-07T21:03:02Z", "date_only": false, "value": "2025-02-07T21:03:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3829", "record": "GHSA-2237-5R9W-VM8J", "field": "creation_timestamp", "uuid": "20ab7ac5-532e-429e-acb3-8c6ee8606189", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-2237-5r9w-vm8j\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ### Impact\n - Information that is restricted from viewing in the search results of site searches (\u203b) can still be viewed via the main text (a feature added in v1.8.0).\n     - Impact by version\n         - v1.8.0 ~ v1.8.3: It will be displayed in the text.\n         - v1.8.0 and earlier: It will not be displayed in the body of the text, but the title (frame name) will be displayed with a link.\n     - Target viewing restriction function\n         - Frame publishing function (private, limited publishing)\n         - IP Restriction Page\n         - Password setting page\n\n### Patches (fixed version)\n - Apply v1.8.4.\n\n### Workarounds\n - Remove the site search (e.g. hide frames).\u3002\n\n### References\nnone\n\ud83d\udccf Published: 2025-02-07T20:50:20Z\n\ud83d\udccf Modified: 2025-02-07T20:50:20Z\n\ud83d\udd17 References:\n1. https://github.com/opensource-workshop/connect-cms/security/advisories/GHSA-2237-5r9w-vm8j\n2. https://github.com/opensource-workshop/connect-cms", "url": "https://t.me/DarkWebInformer_CVEAlerts/3829", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-09T07:14:40.311Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}