{"vulnerability": "CVE-2025-27134", "sightings": [{"uuid": "75c3146a-64e3-4dcc-8cb4-984ff57c13ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114427698562006042", "content": "", "creation_timestamp": "2025-04-30T15:48:36.297442Z"}, {"uuid": "f9d0c541-85ec-4c2d-bbd8-0eb424a82890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo27rtocch2h", "content": "", "creation_timestamp": "2025-04-30T16:30:32.984749Z"}, {"uuid": "f09b9300-91c8-4abd-a422-0a2737e9d34e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lroeg4jhrg2u", "content": "", "creation_timestamp": "2025-06-15T21:02:21.826209Z"}, {"uuid": "c95f3a97-b506-4975-a971-5b7b137e1ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "Telegram/Gwvh-n-ygZ7AZvt4Z14lI64V1AihU4WxZxoYYl7z1l7jTPI", "content": "", "creation_timestamp": "2025-04-30T17:32:01.000000Z"}, {"uuid": "c0ebde8b-7088-4800-98bc-a82283e999dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27134", "type": "seen", "source": "https://t.me/cvedetector/24117", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-27134 - Joplin Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-27134 \nPublished : April 30, 2025, 3:16 p.m. | 28\u00a0minutes ago \nDescription : Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. Prior to version 3.3.3, a privilege escalation vulnerability exists in the Joplin server, allowing non-admin users to exploit the API endpoint `PATCH /api/users/:id` to set the `is_admin` field to 1. The vulnerability allows malicious low-privileged users to perform administrative actions without proper authorization. This issue has been patched in version 3.3.3. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T17:55:17.000000Z"}]}