{"vulnerability": "cve-2025-53003", "sightings": [{"uuid": "2f9a0591-5ecf-4124-88b7-413df5379975", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53003", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19999", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-53003\n\ud83d\udd25 CVSS Score: 8.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: The Janssen Project is an open-source identity and access management (IAM) platform. Prior to version 1.8.0, the Config API returns results without scope verification. This has a large internal surface attack area that exposes all sorts of information from the IDP including clients, users, scripts ..etc. This issue has been patched in version 1.8.0. A workaround for this vulnerability involves users forking and building the config api, patching it in their system following commit 92eea4d.\n\ud83d\udccf Published: 2025-07-01T01:22:05.855Z\n\ud83d\udccf Modified: 2025-07-01T01:22:05.855Z\n\ud83d\udd17 References:\n1. https://github.com/JanssenProject/jans/security/advisories/GHSA-373j-mhpf-84wg\n2. https://github.com/JanssenProject/jans/issues/11575\n3. https://github.com/JanssenProject/jans/commit/92eea4d4637f1cae16ad2f07b2c16378ff3fc5f1\n4. https://github.com/JanssenProject/jans/releases/tag/v1.8.0", "creation_timestamp": "2025-07-01T02:07:44.000000Z"}, {"uuid": "42422707-2ae4-4497-af8f-5538c30e78c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-53003", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsv734unv62l", "content": "", "creation_timestamp": "2025-07-01T07:40:30.819431Z"}]}