{"vulnerability": "cve-2025-24365", "sightings": [{"uuid": "aa92d71f-466e-42cb-8ed0-1171c5e170d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113902283216034484", "content": "", "creation_timestamp": "2025-01-27T20:48:51.176663Z"}, {"uuid": "1dffb9ff-67ba-4592-b962-4a9d5106828d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113901597263624137", "content": "", "creation_timestamp": "2025-01-27T17:54:07.026942Z"}, {"uuid": "63e04b37-d4d2-481f-8371-2bc31bd6e07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdjn3ep2f", "content": "", "creation_timestamp": "2025-01-27T18:16:25.075494Z"}, {"uuid": "8ec9e2a3-52ac-478a-b6bd-e41249369491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "cve-2025-24365", "type": "seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114434451714753157", "content": "", "creation_timestamp": "2025-05-01T20:26:00.683155Z"}, {"uuid": "c0781b0c-f6e5-4d90-a56e-b3d948fafd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/cvedetector/16492", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-24365 - Vaultwarden Unauthenticated Privilege Escalation in Bitwarden Organization Management\", \n  \"Content\": \"CVE ID : CVE-2025-24365 \nPublished : Jan. 27, 2025, 6:15 p.m. | 22\u00a0minutes ago \nDescription : vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs. Attacker can obtain owner rights of other organization. Hacker should know the ID of victim organization (in real case the user can be a part of the organization as an unprivileged user) and be the owner/admin of other organization (by default you can create your own organization) in order to attack. This vulnerability is fixed in 1.33.0. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T20:11:24.000000Z"}, {"uuid": "f9d8e9a8-e234-40b0-a343-250243e266a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-24365", "type": "published-proof-of-concept", "source": "https://t.me/bizone_channel/1863", "content": "\ud83c\udf1b CVE-2025-24364 \u0438 CVE-2025-24365: \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Vaultwarden\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c BI.ZONE TDR, \u0432 2025 \u0433\u043e\u0434\u0443 Vaultwarden \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043a\u0430\u0436\u0434\u0430\u044f \u0434\u0435\u0441\u044f\u0442\u0430\u044f \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0432 Vaultwarden, \u043f\u0440\u0438 \u0435\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0443\u0437\u043d\u0430\u0435\u0442 \u0438 \u0438\u0445. \u0410 \u0435\u0441\u043b\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441\u0435\u043a\u0440\u0435\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e API, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043f\u0430\u0434\u0435\u0442 \u043d\u0430 \u0445\u043e\u0441\u0442 \u0441 \u043e\u0431\u0448\u0438\u0440\u043d\u043e\u0439 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c\u044e.\n\n\u041d\u0430\u0448\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 Vaultwarden. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043c\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: CVE-2025-24364 \u0438 CVE-2025-24365.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u043b\u0438, \u043a\u0430\u043a \u0443\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438 \u0434\u0430\u043b\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438, \u043a\u0430\u043a \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2025-04-22T15:37:47.000000Z"}, {"uuid": "5ae40751-6cfa-4584-a804-abfdfcc3393f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/EchelonEyes/3829", "content": "", "creation_timestamp": "2026-07-26T02:00:30.996441Z"}, {"uuid": "cea40a04-48f0-4574-8484-3a9569639f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/mephictf/902", "content": "", "creation_timestamp": "2026-07-26T07:01:45.748230Z"}, {"uuid": "f22103d3-594e-4c8e-96d8-3a70270207b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/mephictf/902", "content": "", "creation_timestamp": "2026-07-27T00:01:30.440232Z"}, {"uuid": "16bcc809-c97e-4b86-ac43-acf16562ed8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/EchelonEyes/3829", "content": "", "creation_timestamp": "2026-07-27T00:00:35.937574Z"}, {"uuid": "7c53265e-1899-4d20-a20d-b192124b07ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3829", "content": "", "creation_timestamp": "2026-07-28T00:00:53.325785Z"}, {"uuid": "5198ab1d-18bb-4f77-b751-df92814a7226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "published-proof-of-concept", "source": "https://t.me/mephictf/902", "content": "", "creation_timestamp": "2026-07-28T21:00:05.601433Z"}, {"uuid": "ca4ba7e9-998e-4d65-b636-8820f13e9221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "published-proof-of-concept", "source": "https://t.me/mephictf/902", "content": "", "creation_timestamp": "2026-07-29T00:00:12.975967Z"}, {"uuid": "a40907c1-65b3-4c85-814d-e713a9885547", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/divannyi_it/1863", "content": "", "creation_timestamp": "2026-07-29T09:00:07.692751Z"}, {"uuid": "12a77825-2b0a-4825-9299-30af2bd4b6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/sysadm_in_up/2381", "content": "", "creation_timestamp": "2026-07-29T12:03:16.401587Z"}, {"uuid": "224bf286-a049-4f92-b995-72c2631a53a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/divannyi_it/1863", "content": "", "creation_timestamp": "2026-07-30T00:02:06.633485Z"}, {"uuid": "3ade206f-f237-405b-9f41-31033e984268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/sysadm_in_up/2381", "content": "", "creation_timestamp": "2026-07-30T00:03:01.121204Z"}, {"uuid": "95f21f4a-39b7-4efe-8a8c-67a08d2e719e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/2381", "content": "", "creation_timestamp": "2026-08-04T00:00:08.815973Z"}, {"uuid": "318f4fa4-4b54-4e17-a5dc-344c6604e86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/purp_sec/222", "content": "", "creation_timestamp": "2026-08-04T13:00:14.201389Z"}, {"uuid": "01fc8980-140d-40a3-aab2-dd0c430c7fae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2025-24365", "type": "seen", "source": "https://t.me/purp_sec/222", "content": "", "creation_timestamp": "2026-08-05T00:00:10.613305Z"}]}