{"metadata": {"vulnerability": "CVE-2023-25158", "count": 68, "kinds": {"milestone": 5, "sighting": 35, "kev": 11, "other": 17}}, "data": [{"timestamp": "2023-02-03T16:59:18.244Z", "date_only": false, "value": "2023-02-03T16:59:18.244Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-25158", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-02-21T20:57:47.754Z", "date_only": false, "value": "2023-02-21T20:57:47.754Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-25158", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-02-21T20:57:47.754Z", "date_only": false, "value": "2023-02-21T20:57:47.754Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2023-25158", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-02-21T21:15:00Z", "date_only": false, "value": "2023-02-21T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-99C3-QC2Q-P94M", "record": "GHSA-99C3-QC2Q-P94M", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-02-21T21:15:00Z", "date_only": false, "value": "2023-02-21T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-25158", "record": "GSD-2023-25158", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-02-21T21:15:11.157Z", "date_only": false, "value": "2023-02-21T21:15:11.157", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25158", "record": "FKIE_CVE-2023-25158", "field": "published"}, {"timestamp": "2023-02-22T00:00:00Z", "date_only": true, "value": "2023-02-22", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2023-25158", "record": "GSD-2023-25158", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2023-02-22T00:00:00Z", "date_only": true, "value": "2023-02-22", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2023-25158", "record": "GSD-2023-25158", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2023-02-22T00:47:05Z", "date_only": false, "value": "2023-02-22T00:47:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/58646", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "0c34bb18-e9ee-47e9-9ea3-a3c9d1c8c546", "content": "\u203c CVE-2023-25158 \u203c\n\nGeoTools is an open source Java library that provides tools for geospatial data. GeoTools includes support for OGC Filter expression language parsing, encoding and execution against a range of datastore. SQL Injection Vulnerabilities have been found when executing OGC Filters with JDBCDataStore implementations. Users are advised to upgrade to either version 27.4 or to 28.2 to resolve this issue. Users unable to upgrade may disable `encode functions` for PostGIS DataStores or enable `prepared statements` for JDBCDataStores as a partial mitigation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/58646"}, {"timestamp": "2023-02-22T19:16:06Z", "date_only": false, "value": "2023-02-22T19:16:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-99C3-QC2Q-P94M", "record": "GHSA-99C3-QC2Q-P94M", "field": "published"}, {"timestamp": "2023-02-22T19:16:06Z", "date_only": false, "value": "2023-02-22T19:16:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-99C3-QC2Q-P94M", "record": "GHSA-99C3-QC2Q-P94M", "field": "modified"}, {"timestamp": "2023-03-02T22:36:00Z", "date_only": false, "value": "2023-03-02T22:36Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-25158", "record": "GSD-2023-25158", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-06-11T20:22:50Z", "date_only": false, "value": "2023-06-11T20:22:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/4538", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "409cadb6-b2d4-4beb-a44d-763c62927686", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aGeoServer & GeoTools SQL Injection (CVE-2023-25157 & CVE-2023-25158)\nURL\uff1ahttps://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158\n\n\u6807\u7b7e\uff1a#CVE-2023", "url": "https://t.me/GithubRedTeam/4538"}, {"timestamp": "2023-12-13T01:20:39.903Z", "date_only": false, "value": "2023-12-13T01:20:39.903747Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-25158", "record": "GSD-2023-25158", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-07-11T05:37:18Z", "date_only": false, "value": "2024-07-11T05:37:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/43294", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "ed55a845-c947-4713-8ba2-6410d66e8134", "content": "Instituto Argentino del Petr\u00f3leo y del Gas \n\nCVE: \n\nCVE-2023-25157\n\nTARGET: \n\nhttps://geopg.iapg.org.ar/geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName=GeoPG:areasPrecarga&CQL_FILTER=strStartswith(obj_version,%27%27%27%27)=true\n\nEXPLOIT (POC):\n\nhttps://github.com/win3zz/CVE-2023-25157 \n\nINFO: \n\nhttps://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158", "url": "https://t.me/LockBitRaasRansomware/43294"}, {"timestamp": "2024-07-11T05:37:18Z", "date_only": false, "value": "2024-07-11T05:37:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/8kuZMeQDWj_3Y_Wh_LQrqlGxyf7tVz7n1SRMvSXmlKlfrS8", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "24ea0b50-aca8-4d2f-bb7e-11038eeef5ab"}, {"timestamp": "2024-07-11T05:37:18Z", "date_only": false, "value": "2024-07-11T05:37:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/97o8H92ysPogWiZPdtoiRG_yDzZCyat-wYa5JUnG0_YL0po", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "d7a6f84f-268b-4a7d-b79b-f5bf0ea33e3b"}, {"timestamp": "2024-07-11T05:37:19Z", "date_only": false, "value": "2024-07-11T05:37:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/IqdM5nvzs1brEdeE8cbCEB5Vhh4zS30-EIEq7TIjslasGuw", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "f06c9dfb-a5bd-4dd6-b173-889a0c9f5f95"}, {"timestamp": "2024-08-02T11:18:36.170Z", "date_only": false, "value": "2024-08-02T11:18:36.170Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-25158", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-23T05:27:52Z", "date_only": false, "value": "2024-08-23T05:27:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitChannels/86623", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "caa5de5b-397c-484d-bc23-6fa9d25e8ff7", "content": "Instituto Argentino del Petr\u00f3leo y del Gas \n\nCVE: \n\nCVE-2023-25157\n\nTARGET: \n\nhttps://geopg.iapg.org.ar/geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName=GeoPG:areasPrecarga&CQL_FILTER=strStartswith(obj_version,%27%27%27%27)=true\n\nEXPLOIT (POC):\n\nhttps://github.com/win3zz/CVE-2023-25157 \n\nINFO: \n\nhttps://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158", "url": "https://t.me/LockBitChannels/86623"}, {"timestamp": "2024-08-23T05:27:54Z", "date_only": false, "value": "2024-08-23T05:27:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitChannels/23073", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "9c1eb344-1a09-4d33-b789-3802c9b57d60", "content": "Instituto Argentino del Petr\u00f3leo y del Gas \n\nCVE: \n\nCVE-2023-25157\n\nTARGET: \n\nhttps://geopg.iapg.org.ar/geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName=GeoPG:areasPrecarga&CQL_FILTER=strStartswith(obj_version,%27%27%27%27)=true\n\nEXPLOIT (POC):\n\nhttps://github.com/win3zz/CVE-2023-25157 \n\nINFO: \n\nhttps://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158", "url": "https://t.me/LockBitChannels/23073"}, {"timestamp": "2024-08-23T05:27:58Z", "date_only": false, "value": "2024-08-23T05:27:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gj93P2l6tR-CQpz0ZmAmr4u1uuySqvPbjtdUoITSQlSP_pI", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "1e21448f-f75c-45c3-8dc7-50ea3e538af0"}, {"timestamp": "2024-08-23T05:27:59Z", "date_only": false, "value": "2024-08-23T05:27:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ASDRpP9GiU4JO8pOjmGxmddBerQfe_KbWsxU6W9kHCoKk1U", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "1df3afc1-587f-40ff-873a-bf478e4c3a37"}, {"timestamp": "2024-09-21T11:50:57Z", "date_only": false, "value": "2024-09-21T11:50:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitChannels/46741", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "35933e55-4fd2-40e1-9dba-b85b06cd7df1", "content": "Instituto Argentino del Petr\u00f3leo y del Gas \n\nCVE: \n\nCVE-2023-25157\n\nTARGET: \n\nhttps://geopg.iapg.org.ar/geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName=GeoPG:areasPrecarga&CQL_FILTER=strStartswith(obj_version,%27%27%27%27)=true\n\nEXPLOIT (POC):\n\nhttps://github.com/win3zz/CVE-2023-25157 \n\nINFO: \n\nhttps://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158", "url": "https://t.me/LockBitChannels/46741"}, {"timestamp": "2024-09-21T11:51:17Z", "date_only": false, "value": "2024-09-21T11:51:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3no4dIg2k44AvUb6sgqwXmgAoKxKI2JtekpyDANlNcY6rY8", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "adb2e729-b040-42c2-a86e-0ad290c7353b"}, {"timestamp": "2024-09-21T11:51:23Z", "date_only": false, "value": "2024-09-21T11:51:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cGZe9HOatBOpRYxdc_GFENPohKeQJpSX-0mFvbmC9TF0oFk", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "9e61c733-6bd7-42ef-a53a-5e384b33b0aa"}, {"timestamp": "2024-09-25T14:32:27Z", "date_only": false, "value": "2024-09-25T14:32:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitChannels/114102", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "f8db24f6-7cac-44d2-8b5a-0f6adaadd379", "content": "Instituto Argentino del Petr\u00f3leo y del Gas \n\nCVE: \n\nCVE-2023-25157\n\nTARGET: \n\nhttps://geopg.iapg.org.ar/geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName=GeoPG:areasPrecarga&CQL_FILTER=strStartswith(obj_version,%27%27%27%27)=true\n\nEXPLOIT (POC):\n\nhttps://github.com/win3zz/CVE-2023-25157 \n\nINFO: \n\nhttps://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158", "url": "https://t.me/LockBitChannels/114102"}, {"timestamp": "2024-09-25T14:32:29Z", "date_only": false, "value": "2024-09-25T14:32:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitChannels/51257", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "55da205d-5bb8-44c2-9457-70b4d8bd69f8", "content": "Instituto Argentino del Petr\u00f3leo y del Gas \n\nCVE: \n\nCVE-2023-25157\n\nTARGET: \n\nhttps://geopg.iapg.org.ar/geoserver/ows?service=WFS&version=1.0.0&request=GetFeature&typeName=GeoPG:areasPrecarga&CQL_FILTER=strStartswith(obj_version,%27%27%27%27)=true\n\nEXPLOIT (POC):\n\nhttps://github.com/win3zz/CVE-2023-25157 \n\nINFO: \n\nhttps://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158", "url": "https://t.me/LockBitChannels/51257"}, {"timestamp": "2024-09-25T14:32:41Z", "date_only": false, "value": "2024-09-25T14:32:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1-fQEAf9zdZhP8U9JlfhshUKIf_oGTilQHlR5yefhegAE4Q", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "11471d47-ef75-4bb1-be91-6e0333abcacb"}, {"timestamp": "2024-09-25T14:32:41Z", "date_only": false, "value": "2024-09-25T14:32:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/m7MxC6hm7ItAhposRvk8IiGwxjG9a9shiloiRAer3HT2F9U", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "352eb423-3ae0-479b-8c5b-c04ba02e0c96"}, {"timestamp": "2024-12-20T09:39:30Z", "date_only": false, "value": "2024-12-20T09:39:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/73P5n3sLX9SuBPcHTMorCEYvblMCOZyJ2AhQRHcKBTQ8fynE", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "4d6be71d-c961-4c03-90ab-b46b6296429f"}, {"timestamp": "2025-01-07T05:08:50Z", "date_only": false, "value": "2025-01-07T05:08:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/NRpQJui_QPN-VwWhVrsL5-YH0LXmaCMbhtvD462cnLE5yAgk", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "fca6101e-c3b0-4fe2-95a9-48f4e63f6052"}, {"timestamp": "2025-01-07T05:08:53Z", "date_only": false, "value": "2025-01-07T05:08:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OEg8HrPyF37J-vNyvgAbgVfH1cND-LUmbo1w5fnZbA97NXU_", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "0ebf9ebf-08b8-4c3f-b936-abd109976466"}, {"timestamp": "2025-01-13T01:03:08Z", "date_only": false, "value": "2025-01-13T01:03:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/55DVCuR8w0IyLrTs3rzulkPBxgRxTIiTeJ7hyFYZ4WSp6gJI", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "683a96ba-88c0-424e-92e7-ab84bb39ae4b"}, {"timestamp": "2025-01-18T21:56:29Z", "date_only": false, "value": "2025-01-18T21:56:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/IWS_vdKP8sgrY5gLgCPrkZk-LHS_2k9xWX1yT9cotUmlo2Uy", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "ffb211e7-6be2-4a1f-8a09-2818b231aa16"}, {"timestamp": "2025-01-18T21:56:31Z", "date_only": false, "value": "2025-01-18T21:56:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sI95sQqr7vmPeKfqrt4vEXMsY3f0wQ-hn7oUnpwK6uLzntML", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "78a8a9be-47e5-4b1e-8123-156cfae95b90"}, {"timestamp": "2025-03-10T20:59:06.366Z", "date_only": false, "value": "2025-03-10T20:59:06.366397Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-25158", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-03-10T20:59:06.366Z", "date_only": false, "value": "2025-03-10T20:59:06.366397Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25158", "record": "FKIE_CVE-2023-25158", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-03-10T21:07:23.201Z", "date_only": false, "value": "2025-03-10T21:07:23.201Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-25158", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-03-10T21:07:23.201Z", "date_only": false, "value": "2025-03-10T21:07:23.201Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-25158", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-04T16:30:00Z", "date_only": false, "value": "2025-08-04T16:30:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0304", "record": "NCSC-2026-0304", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-31T21:02:44.972Z", "date_only": false, "value": "2025-10-31T21:02:44.972286Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jermtfhn2a", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "90cba7df-d5d8-48b6-8115-43b5227a71be", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jermtfhn2a"}, {"timestamp": "2026-06-17T05:40:48.223Z", "date_only": false, "value": "2026-06-17T05:40:48.223", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-25158", "record": "FKIE_CVE-2023-25158", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:25.125Z", "date_only": false, "value": "2026-07-29T12:00:25.125329Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/14811", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "cefb600c-7f74-4888-812a-c57a7dee64b4", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-25157-and-CVE-2023-25158*\nGithub: https://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158", "url": "https://t.me/CVEhub/14811"}, {"timestamp": "2026-07-31T00:00:29.206Z", "date_only": false, "value": "2026-07-31T00:00:29.206313Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/14811", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "2e3c12fb-6ab0-42ff-a506-1e17238fd534", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#sql_injection\nName: *CVE-2023-25157-and-CVE-2023-25158*\nGithub: https://github.com/murataydemir/CVE-2023-25157-and-CVE-2023-25158", "url": "https://t.me/CVEhub/14811"}, {"timestamp": "2026-08-15T17:00:04.357Z", "date_only": false, "value": "2026-08-15T17:00:04.357326Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/9812", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "5c331968-19c3-44c1-a2fc-8fe4254cc91d", "content": "\u26a1 UPDATE: GeoServer has patched the actively targeted SQL injection flaw.\n\nThe issue affects PostGIS-backed deployments and is a regression of CVE-2023-25158.\n\nUpdate now: https://thehackernews.com/2026/08/unpatched-geoserver-zero-day-targeted.html", "url": "https://t.me/thehackernews/9812"}, {"timestamp": "2026-08-18T08:44:08.689Z", "date_only": false, "value": "2026-08-18T08:44:08.689714Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2026-0304", "record": "NCSC-2026-0304", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-08-18T08:44:08.689Z", "date_only": false, "value": "2026-08-18T08:44:08.689714Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2026-0304", "record": "NCSC-2026-0304", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-08-18T08:44:08.689Z", "date_only": false, "value": "2026-08-18T08:44:08.689714Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2026-0304", "record": "NCSC-2026-0304", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-08-18T12:45:07.927Z", "date_only": false, "value": "2026-08-18T12:45:07.927864Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-geoserver", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "c3997168-c11d-401f-aaf7-8397c25afeb2", "url": "https://www.acn.gov.it/portale/w/rilevato-sfruttamento-di-vulnerabilita-in-geoserver"}, {"timestamp": "2026-08-19T00:00:00Z", "date_only": false, "value": "2026-08-19T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-25158", "field": "timestamps.asserted_at", "uuid": "a1df9fe0-39f9-4ba8-a3d5-f8e4ab0beae9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-19T00:00:00Z", "date_only": false, "value": "2026-08-19T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-25158", "field": "evidence.0.details.added_date", "uuid": "a1df9fe0-39f9-4ba8-a3d5-f8e4ab0beae9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-19T00:00:00Z", "date_only": false, "value": "2026-08-19T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-25158", "field": "timestamps.first_seen_at", "uuid": "a1df9fe0-39f9-4ba8-a3d5-f8e4ab0beae9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-19T00:00:00Z", "date_only": false, "value": "2026-08-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-25158", "field": "status.status_updated_at", "uuid": "a1df9fe0-39f9-4ba8-a3d5-f8e4ab0beae9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-19T10:51:54Z", "date_only": false, "value": "2026-08-19T10:51:54+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2023-25158", "field": "timestamps.asserted_at", "uuid": "027ad2e9-5a25-46e2-aad6-dc6c8c7d41a5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-19T10:51:54Z", "date_only": false, "value": "2026-08-19T10:51:54+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2023-25158", "field": "timestamps.first_seen_at", "uuid": "027ad2e9-5a25-46e2-aad6-dc6c8c7d41a5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-20T11:00:01Z", "date_only": false, "value": "2026-08-20T11:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-25158", "field": "timestamps.recorded_at", "uuid": "a1df9fe0-39f9-4ba8-a3d5-f8e4ab0beae9", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-20T11:00:22.573Z", "date_only": false, "value": "2026-08-20T11:00:22.573482Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1df9fe0-39f9-4ba8-a3d5-f8e4ab0beae9", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "a530806f-4ffc-4704-bdf1-d0b2f369fe60", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a1df9fe0-39f9-4ba8-a3d5-f8e4ab0beae9"}, {"timestamp": "2026-08-21T01:02:47.470Z", "date_only": false, "value": "2026-08-21T01:02:47.470529Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/027ad2e9-5a25-46e2-aad6-dc6c8c7d41a5", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "35e360fa-89b3-49f7-acfb-63187e93db67", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/027ad2e9-5a25-46e2-aad6-dc6c8c7d41a5"}, {"timestamp": "2026-08-22T10:00:16.023Z", "date_only": false, "value": "2026-08-22T10:00:16.023836Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-21)", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "84c1ce64-c507-4856-a670-a33cbc011faa"}, {"timestamp": "2026-08-22T10:15:08.389Z", "date_only": false, "value": "2026-08-22T10:15:08.389028Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "076ad372-78d1-4090-b24a-ef46daa86210"}, {"timestamp": "2026-08-28T10:00:08.678Z", "date_only": false, "value": "2026-08-28T10:00:08.678953Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "b58562ab-90e5-46c5-a794-a291dab11b9e"}, {"timestamp": "2026-08-31T00:00:00Z", "date_only": false, "value": "2026-08-31T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2023-25158", "field": "timestamps.last_seen_at", "uuid": "027ad2e9-5a25-46e2-aad6-dc6c8c7d41a5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-31T00:00:00Z", "date_only": true, "value": "2026-08-31", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2023-25158", "field": "evidence.0.details.observation_date", "uuid": "027ad2e9-5a25-46e2-aad6-dc6c8c7d41a5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-31T00:00:00Z", "date_only": false, "value": "2026-08-31T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2023-25158", "field": "status.status_updated_at", "uuid": "027ad2e9-5a25-46e2-aad6-dc6c8c7d41a5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-02T01:00:02Z", "date_only": false, "value": "2026-09-02T01:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2023-25158", "field": "timestamps.recorded_at", "uuid": "027ad2e9-5a25-46e2-aad6-dc6c8c7d41a5", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-02T16:00:04.489Z", "date_only": false, "value": "2026-09-02T16:00:04.489595Z", "kind": "sighting", "label": "Seen", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "546580b6-c63a-4661-a5ad-f4f05da82d40"}, {"timestamp": "2026-09-03T00:00:41.476Z", "date_only": false, "value": "2026-09-03T00:00:41.476432Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "record": "CVE-2023-25158", "field": "creation_timestamp", "uuid": "2e73f68f-8cf5-42ec-9229-29652ba0b9f9"}]}