{"metadata": {"vulnerability": "CVE-2025-65091", "count": 24, "kinds": {"milestone": 5, "sighting": 7, "kev": 0, "other": 12}}, "data": [{"timestamp": "2025-11-17T20:55:34.691Z", "date_only": false, "value": "2025-11-17T20:55:34.691Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-65091", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-01-09T18:41:47Z", "date_only": false, "value": "2026-01-09T18:41:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-2G22-WG49-FGV5", "record": "GHSA-2G22-WG49-FGV5", "field": "published"}, {"timestamp": "2026-01-10T03:06:16.775Z", "date_only": false, "value": "2026-01-10T03:06:16.775Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-65091", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-01-10T03:06:16.775Z", "date_only": false, "value": "2026-01-10T03:06:16.775Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-65091", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-10T04:16:01Z", "date_only": false, "value": "2026-01-10T04:16:01Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-2G22-WG49-FGV5", "record": "GHSA-2G22-WG49-FGV5", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-01-10T04:16:01.180Z", "date_only": false, "value": "2026-01-10T04:16:01.180", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-65091", "record": "FKIE_CVE-2025-65091", "field": "published"}, {"timestamp": "2026-01-10T05:00:32.459Z", "date_only": false, "value": "2026-01-10T05:00:32.459568Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2a4r3gka2b", "record": "CVE-2025-65091", "field": "creation_timestamp", "uuid": "5439a632-04e9-4640-9933-1339499af488", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2a4r3gka2b"}, {"timestamp": "2026-01-10T05:02:37.069Z", "date_only": false, "value": "2026-01-10T05:02:37.069523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2aahpcx527", "record": "CVE-2025-65091", "field": "creation_timestamp", "uuid": "c7edf5e1-31a1-41ec-8df2-8ad561d986ee", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mc2aahpcx527"}, {"timestamp": "2026-01-10T05:02:58Z", "date_only": false, "value": "2026-01-10T05:02:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UDMk206lgQvLt4zm60yBzpmxh6GeqSRvdRaLpn90JAOiIEo", "record": "CVE-2025-65091", "field": "creation_timestamp", "uuid": "b954273e-9cad-4cec-8a10-35aa1ed5bcfa"}, {"timestamp": "2026-01-10T08:05:07.642Z", "date_only": false, "value": "2026-01-10T08:05:07.642274Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc2kgtiztp22", "record": "CVE-2025-65091", "field": "creation_timestamp", "uuid": "0009cdb1-3696-4014-9a98-7e37ef913d35", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3mc2kgtiztp22"}, {"timestamp": "2026-01-11T14:55:48Z", "date_only": false, "value": "2026-01-11T14:55:48Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-2G22-WG49-FGV5", "record": "GHSA-2G22-WG49-FGV5", "field": "modified"}, {"timestamp": "2026-01-11T23:00:00Z", "date_only": false, "value": "2026-01-11T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0060", "record": "WID-SEC-W-2026-0060", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-01-11T23:00:00Z", "date_only": false, "value": "2026-01-11T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0060", "record": "WID-SEC-W-2026-0060", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-01-11T23:00:00Z", "date_only": false, "value": "2026-01-11T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0060", "record": "WID-SEC-W-2026-0060", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-01-11T23:00:00Z", "date_only": false, "value": "2026-01-11T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0060", "record": "WID-SEC-W-2026-0060", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-01-12T10:40:55.859Z", "date_only": false, "value": "2026-01-12T10:40:55.859+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-0060", "record": "WID-SEC-W-2026-0060", "field": "document.tracking.generator.date"}, {"timestamp": "2026-01-12T17:35:13.091Z", "date_only": false, "value": "2026-01-12T17:35:13.091420Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-65091", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-01-12T17:35:13.091Z", "date_only": false, "value": "2026-01-12T17:35:13.091420Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-65091", "record": "FKIE_CVE-2025-65091", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-01-12T17:35:19.706Z", "date_only": false, "value": "2026-01-12T17:35:19.706Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-65091", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-01-12T17:35:19.706Z", "date_only": false, "value": "2026-01-12T17:35:19.706Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-65091", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-01-24T21:26:05Z", "date_only": false, "value": "2026-01-24T21:26:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/e76d8e58dcc89b6a3002c30580fbeb4c", "record": "CVE-2025-65091", "field": "creation_timestamp", "uuid": "6ea74ee1-1ebb-4317-b323-24ae1bc5e156", "url": "https://gist.github.com/alon710/e76d8e58dcc89b6a3002c30580fbeb4c"}, {"timestamp": "2026-01-24T22:41:27Z", "date_only": false, "value": "2026-01-24T22:41:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/3babd059f8f3d08b2638e0aaf79beaa0", "record": "CVE-2025-65091", "field": "creation_timestamp", "uuid": "7c840246-d018-40e6-9be6-6c13719a8c40", "url": "https://gist.github.com/alon710/3babd059f8f3d08b2638e0aaf79beaa0"}, {"timestamp": "2026-06-17T09:55:25.797Z", "date_only": false, "value": "2026-06-17T09:55:25.797", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-65091", "record": "FKIE_CVE-2025-65091", "field": "lastModified"}, {"timestamp": "2026-08-14T16:00:04.779Z", "date_only": false, "value": "2026-08-14T16:00:04.779579Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/1368", "record": "CVE-2025-65091", "field": "creation_timestamp", "uuid": "a82f71aa-830d-4344-ad4b-3c1549ea37a4", "content": "\ud83d\udd14 XWiki: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f SQLi \u0432 Full Calendar Macro (CVE-2025-65091, CVSS 10.0)\n\n\u0411\u0430\u0433 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 Velocity-\u0448\u0430\u0431\u043b\u043e\u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b Calendar.JSONService.xml. \u0418\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0430\u043d\u0438\u0442\u0430\u0439\u0437\u0438\u043d\u0433\u0430, \u0432\u0445\u043e\u0434\u043d\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 sql (\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u043b\u044c\u0442\u0440\u044b \u0441\u043e\u0431\u044b\u0442\u0438\u0439) \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043a\u043e\u043d\u043a\u0430\u0442\u0435\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0441\u0442\u0440\u043e\u043a\u0443 HQL-\u0437\u0430\u043f\u0440\u043e\u0441\u0430.\n\n\u0415\u0441\u043b\u0438 \u0432 XWiki \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u0433\u043e\u0441\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f, \u0438\u043b\u0438 \u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0435\u0441\u0442\u044c \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0430\u0432\u0430 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440, \u043e\u043d \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c POST/GET \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0443 Calendar.JSONService, \u0432\u043d\u0435\u0434\u0440\u0438\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 HQL-\u043a\u043e\u0434, \u0447\u0442\u043e\u0431\u044b:\n\n\u23fa\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u0430\u043c\u043f \u0411\u0414 \u0447\u0435\u0440\u0435\u0437 Blind SQLi (\u0432\u043a\u043b\u044e\u0447\u0430\u044f XWikiUsers, \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0435 \u0445\u044d\u0448\u0438, \u0442\u043e\u043a\u0435\u043d\u044b \u0441\u0435\u0441\u0441\u0438\u0439);\n\u23fa\u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b \u0432\u0438\u043a\u0438 \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u0432 \u0434\u0440\u0443\u0433\u0438\u0435 Velocity-\u0441\u043a\u0440\u0438\u043f\u0442\u044b;\n\u23fa\u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0447\u0435\u0440\u0435\u0437 \u0442\u044f\u0436\u0435\u043b\u044b\u0435 \u0440\u0435\u043a\u0443\u0440\u0441\u0438\u0432\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0411\u0414.\n\nPoC \u043d\u0435\u0442, \u043d\u043e \u043c\u043e\u0436\u0435\u0442\u0435 \u0438 \u0441\u0430\u043c\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f.\n\n#red_team #XWiki #SQLi", "url": "https://t.me/purp_sec/1368"}]}