{"metadata": {"vulnerability": "CVE-2025-4893", "count": 18, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 11}}, "data": [{"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2025-4893", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-05-17T02:00:00Z", "date_only": false, "value": "2025-05-17T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2025-4893", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-05-17T09:48:22.567Z", "date_only": false, "value": "2025-05-17T09:48:22.567Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-4893", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-17T11:53:25Z", "date_only": false, "value": "2025-05-17T11:53:25.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2025-4893", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2025-05-18T19:31:03.970Z", "date_only": false, "value": "2025-05-18T19:31:03.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4893", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-18T19:31:03.970Z", "date_only": false, "value": "2025-05-18T19:31:03.970Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2025-4893", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-18T19:37:56Z", "date_only": false, "value": "2025-05-18T19:37:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16773", "record": "CVE-2025-4893", "field": "creation_timestamp", "uuid": "b47de3d3-cb70-4f0c-859d-47f002d7aa3f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4893\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework/core/src/main/java/com/bizzan/bitrade/util/UploadFileUtil.java of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.\n\ud83d\udccf Published: 2025-05-18T19:31:03.970Z\n\ud83d\udccf Modified: 2025-05-18T19:31:03.970Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309447\n2. https://vuldb.com/?ctiid.309447\n3. https://vuldb.com/?submit.577907\n4. https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250515-01.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/16773", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-18T20:15:18Z", "date_only": false, "value": "2025-05-18T20:15:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7JR4-6H99-WVP2", "record": "GHSA-7JR4-6H99-WVP2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-05-18T20:15:18.600Z", "date_only": false, "value": "2025-05-18T20:15:18.600", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4893", "record": "FKIE_CVE-2025-4893", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-18T21:13:00.339Z", "date_only": false, "value": "2025-05-18T21:13:00.339053Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lphxxhs5qn2h", "record": "CVE-2025-4893", "field": "creation_timestamp", "uuid": "314ca364-3073-4822-94bf-a01975086dab", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lphxxhs5qn2h"}, {"timestamp": "2025-05-18T21:30:20Z", "date_only": false, "value": "2025-05-18T21:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7JR4-6H99-WVP2", "record": "GHSA-7JR4-6H99-WVP2", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-18T21:30:20Z", "date_only": false, "value": "2025-05-18T21:30:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7JR4-6H99-WVP2", "record": "GHSA-7JR4-6H99-WVP2", "field": "modified"}, {"timestamp": "2025-05-19T14:09:48.655Z", "date_only": false, "value": "2025-05-19T14:09:48.655184Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4893", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-19T14:09:48.655Z", "date_only": false, "value": "2025-05-19T14:09:48.655184Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4893", "record": "FKIE_CVE-2025-4893", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-19T14:09:52.146Z", "date_only": false, "value": "2025-05-19T14:09:52.146Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-4893", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-19T14:09:52.146Z", "date_only": false, "value": "2025-05-19T14:09:52.146Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-4893", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T09:34:14.857Z", "date_only": false, "value": "2026-06-17T09:34:14.857", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-4893", "record": "FKIE_CVE-2025-4893", "field": "lastModified"}, {"timestamp": "2026-07-22T05:00:05.961Z", "date_only": false, "value": "2026-07-22T05:00:05.961568Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/458", "record": "CVE-2025-4893", "field": "creation_timestamp", "uuid": "3cf91d3d-93d7-43d0-8b85-366ea40e17aa", "content": "Hidden Risk in the Code Undermining System Trust\n\nCVE-2025-4893 identifies a use-after-free (UAF) vulnerability within the Linux kernel's OverlayFS module. The flaw arises when the dput() function is invoked prematurely in the ovl_link_up process, leading to potential access of freed memory in subsequent operations like ovl_dentry_update_reval. This mismanagement can result in system instability or exploitation by malicious actors.\n\n\ud83d\udd17 Read More", "url": "https://t.me/pphm_HackerNews/458"}], "metrics": {"as_of": "2026-10-31T00:45:49.574Z", "anchors": {"origin": {"timestamp": "2025-05-18T19:31:03.970Z", "date_only": false, "value": "2025-05-18T19:31:03.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4893", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-05-18T19:31:03.970Z", "date_only": false, "value": "2025-05-18T19:31:03.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4893", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-05-18T19:37:56Z", "date_only": false, "value": "2025-05-18T19:37:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16773", "record": "CVE-2025-4893", "field": "creation_timestamp", "uuid": "b47de3d3-cb70-4f0c-859d-47f002d7aa3f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4893\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework/core/src/main/java/com/bizzan/bitrade/util/UploadFileUtil.java of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.\n\ud83d\udccf Published: 2025-05-18T19:31:03.970Z\n\ud83d\udccf Modified: 2025-05-18T19:31:03.970Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309447\n2. https://vuldb.com/?ctiid.309447\n3. https://vuldb.com/?submit.577907\n4. https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250515-01.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/16773", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 412.03, "hours": 0.11445277777777776, "days": 0.00476886574074074, "min_seconds": 412.03, "max_seconds": 412.03, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-18T19:31:03.970Z", "date_only": false, "value": "2025-05-18T19:31:03.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4893", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-05-18T19:37:56Z", "date_only": false, "value": "2025-05-18T19:37:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16773", "record": "CVE-2025-4893", "field": "creation_timestamp", "uuid": "b47de3d3-cb70-4f0c-859d-47f002d7aa3f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4893\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework/core/src/main/java/com/bizzan/bitrade/util/UploadFileUtil.java of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.\n\ud83d\udccf Published: 2025-05-18T19:31:03.970Z\n\ud83d\udccf Modified: 2025-05-18T19:31:03.970Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309447\n2. https://vuldb.com/?ctiid.309447\n3. https://vuldb.com/?submit.577907\n4. https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250515-01.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/16773", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 45810885.604599, "hours": 12725.246001277499, "days": 530.2185833865625, "min_seconds": 45810885.604599, "max_seconds": 45810885.604599, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-18T19:31:03.970Z", "date_only": false, "value": "2025-05-18T19:31:03.970Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-4893", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T00:45:49.574Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 45810473.574599, "hours": 12725.131548499721, "days": 530.2138145208218, "min_seconds": 45810473.574599, "max_seconds": 45810473.574599, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-18T19:37:56Z", "date_only": false, "value": "2025-05-18T19:37:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16773", "record": "CVE-2025-4893", "field": "creation_timestamp", "uuid": "b47de3d3-cb70-4f0c-859d-47f002d7aa3f", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-4893\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. This affects the function uploadLocalImage of the file /CoinExchange_CryptoExchange_Java-master/00_framework/core/src/main/java/com/bizzan/bitrade/util/UploadFileUtil.java of the component File Upload Endpoint. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.\n\ud83d\udccf Published: 2025-05-18T19:31:03.970Z\n\ud83d\udccf Modified: 2025-05-18T19:31:03.970Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.309447\n2. https://vuldb.com/?ctiid.309447\n3. https://vuldb.com/?submit.577907\n4. https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250515-01.md", "url": "https://t.me/DarkWebInformer_CVEAlerts/16773", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-31T00:45:49.574Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}