{"metadata": {"vulnerability": "ghsa-52jx-g6m5-h735", "count": 10, "kinds": {"milestone": 3, "sighting": 1, "kev": 0, "other": 6}}, "data": [{"timestamp": "2025-02-26T18:11:52.306Z", "date_only": false, "value": "2025-02-26T18:11:52.306Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2025-27509", "record": "CVE-2025-27509", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-06T19:00:36.098Z", "date_only": false, "value": "2025-03-06T19:00:36.098Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2025-27509", "record": "CVE-2025-27509", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-03-06T19:00:36.098Z", "date_only": false, "value": "2025-03-06T19:00:36.098Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27509 / GitHub_M", "record": "CVE-2025-27509", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-06T19:12:27Z", "date_only": false, "value": "2025-03-06T19:12:27Z", "kind": "milestone", "label": "Published", "source": "github", "record": "ghsa-52jx-g6m5-h735", "field": "published"}, {"timestamp": "2025-03-06T19:15:27Z", "date_only": false, "value": "2025-03-06T19:15:27Z", "kind": "other", "label": "Nvd published at", "source": "github", "record": "ghsa-52jx-g6m5-h735", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-03-06T19:29:18.572Z", "date_only": false, "value": "2025-03-06T19:29:18.572033Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2025-27509 / CISA-ADP", "record": "CVE-2025-27509", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-06T19:29:47.248Z", "date_only": false, "value": "2025-03-06T19:29:47.248Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27509", "record": "CVE-2025-27509", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-06T19:29:47.248Z", "date_only": false, "value": "2025-03-06T19:29:47.248Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2025-27509 / CISA-ADP", "record": "CVE-2025-27509", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-03-06T19:38:27Z", "date_only": false, "value": "2025-03-06T19:38:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6738", "record": "GHSA-52JX-G6M5-H735", "field": "creation_timestamp", "uuid": "861dfd07-7a86-4771-be22-20cd7231fbf3", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-27509\n\ud83d\udd25 CVSS Score: 9.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time (JIT) provisioning is enabled, or create new accounts tied to forged assertions if f MDM enrollment is enabled. This vulnerability is fixed in 4.64.2, 4.63.2, 4.62.4, and 4.58.1.\n\ud83d\udccf Published: 2025-03-06T19:00:36.098Z\n\ud83d\udccf Modified: 2025-03-06T19:00:36.098Z\n\ud83d\udd17 References:\n1. https://github.com/fleetdm/fleet/security/advisories/GHSA-52jx-g6m5-h735\n2. https://github.com/fleetdm/fleet/commit/718c95e47ad010ad6b8ceb3f3460e921fbfc53bb", "url": "https://t.me/DarkWebInformer_CVEAlerts/6738"}, {"timestamp": "2026-01-21T16:51:42Z", "date_only": false, "value": "2026-01-21T16:51:42Z", "kind": "other", "label": "Updated", "source": "github", "record": "ghsa-52jx-g6m5-h735", "field": "modified"}]}