{"vulnerability": "cve-2024-55925", "sightings": [{"uuid": "83882330-37f1-4c93-948a-56a088b07127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgggguy63g2k", "content": "", "creation_timestamp": "2025-01-23T17:40:06.761687Z"}, {"uuid": "259688e6-8fa8-4e99-9c4a-a80db0a20412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lggf3okzl22j", "content": "", "creation_timestamp": "2025-01-23T17:15:56.426436Z"}, {"uuid": "8a2e0a99-e300-4289-a7c5-d61dbde4c89e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5176", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55925\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: In Xerox Workplace Suite, an API restricted to specific hosts can be bypassed by manipulating the Host header. If the server improperly validates or trusts the Host header without verifying the actual destination, an attacker can forge a value to gain unauthorized access. This exploit targets improper host validation, potentially exposing sensitive API endpoints.\n\ud83d\udccf Published: 2025-01-23T17:03:33.187Z\n\ud83d\udccf Modified: 2025-02-24T17:09:59.029Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-WorkplaceSuite%C2%AE.pdf", "creation_timestamp": "2025-02-24T17:21:39.000000Z"}, {"uuid": "d09543e0-e1bd-4486-8f9c-3aafec9d4a12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://t.me/cvedetector/16207", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-55925 - Adobe Campaign Header Manipulation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-55925 \nPublished : Jan. 23, 2025, 5:15 p.m. | 40\u00a0minutes ago \nDescription : API Security bypass through header manipulation \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-23T19:09:08.000000Z"}, {"uuid": "881f95aa-4985-4bbb-b0e6-fc3faa77419a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113878776319408571", "content": "", "creation_timestamp": "2025-01-23T17:10:27.025360Z"}, {"uuid": "50beb9d0-3126-45fb-abc6-8bbcaf9133a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55925", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2797", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-55925\n\ud83d\udd39 Description: API Security bypass through header manipulation\n\ud83d\udccf Published: 2025-01-23T17:03:33.187Z\n\ud83d\udccf Modified: 2025-01-23T18:57:13.529Z\n\ud83d\udd17 References:\n1. https://securitydocs.business.xerox.com/wp-content/uploads/2025/01/Xerox-Security-Bulletin-XRX25-002-for-Xerox%C2%AE-Workplace-Suite%C2%AE.pdf", "creation_timestamp": "2025-01-23T19:03:28.000000Z"}]}