{"vulnerability": "CVE-2025-23419", "sightings": [{"uuid": "90cc8d4a-5fb7-4cae-aa97-7034ac7eae76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://bsky.app/profile/omo.bsky.social/post/3lhhnhzpwhk2j", "content": "", "creation_timestamp": "2025-02-05T22:43:53.437756Z"}, {"uuid": "4bdfc3c1-b09e-4cf3-a457-3448880fc8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-23419", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhicaomeb22o", "content": "", "creation_timestamp": "2025-02-06T04:55:34.106324Z"}, {"uuid": "55364b85-c4d9-43aa-9a3c-31d145ec6c06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhh5dqksd622", "content": "", "creation_timestamp": "2025-02-05T17:55:07.843764Z"}, {"uuid": "34c61f1a-04cd-4255-ab8b-4deb4f6f0f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lhliseas622h", "content": "", "creation_timestamp": "2025-02-07T11:30:48.817027Z"}, {"uuid": "6c19f8de-46a1-4dbc-b730-f44e1ea7ea4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhh6ktldeu2i", "content": "", "creation_timestamp": "2025-02-05T18:16:59.604558Z"}, {"uuid": "0269fa01-ff40-4bab-ab84-ca787acc2608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113952669589876357", "content": "", "creation_timestamp": "2025-02-05T18:22:28.901318Z"}, {"uuid": "5e06673e-7e44-4ab6-bbdd-cf37dd5215ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhkcwgdqas2o", "content": "", "creation_timestamp": "2025-02-07T00:13:02.917770Z"}, {"uuid": "8825aa2f-0fad-4e77-9a7e-411e147261cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lhkcwxzvgs2o", "content": "", "creation_timestamp": "2025-02-07T00:13:21.224256Z"}, {"uuid": "654bf16c-4a98-4c55-a2d4-fbc3b5eb7cb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113964498666426205", "content": "", "creation_timestamp": "2025-02-07T20:30:46.390107Z"}, {"uuid": "d0cb59a6-32d2-4d77-9646-73601cd067d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3li6277o3ca2o", "content": "", "creation_timestamp": "2025-02-14T20:30:09.658747Z"}, {"uuid": "f484fb4f-8dc8-47f0-9181-a3e5649a31e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://gist.github.com/rcy/48e679544bf1de403b110aa208fb64b0", "content": "", "creation_timestamp": "2025-07-19T21:19:23.000000Z"}, {"uuid": "6f426752-e44c-4b42-8073-817db9b77817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "published-proof-of-concept", "source": "Telegram/LegeDtMxRTlSxU-E4vRWPyR6r8eVZBSkTQd0bvp4AR24yPQ", "content": "", "creation_timestamp": "2025-12-17T21:00:04.000000Z"}, {"uuid": "914ec106-e347-45d1-aab0-7881d842d97d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://t.me/cvedetector/17325", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23419 - Nginx SSL/TLS Session Ticket Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23419 \nPublished : Feb. 5, 2025, 6:15 p.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate authentication requirements on these servers. This vulnerability arises when  TLS Session Tickets   are used and/or the  SSL session cache   are used in the default server and the default server is performing client certificate authentication.\u00a0\u00a0  \n  \nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-05T21:39:56.000000Z"}, {"uuid": "8dc76006-372c-41fa-9d63-3d61af200d0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://bsky.app/profile/forkline.eurosky.social/post/3mmmofjj4lr2f", "content": "CVE-2025-23419: TLS session resumption could bypass client cert auth when server blocks share the same IP:port. Patched in NGINX 1.30.1, obsolete patch removed in 1.31.x.\n\nForkline ingress-nginx v2026.5.24 ships NGINX 1.31.1. Clean fix, no backport needed.\n\ngithub.com/forkline/ingress-nginx", "creation_timestamp": "2026-05-24T19:15:50.081873Z"}, {"uuid": "6895491a-c0ff-45c5-b63d-6238488ae03f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://t.me/angie_software/81", "content": "Angie \u0438 Angie PRO \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 1.8.2\n\n\u041c\u044b \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Angie \u0438 \u0435\u0433\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Angie PRO \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.8.2.\n\n\u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0CVE-2025-23419, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u043d\u0435\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 nginx 1.27.4 (\u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 TLS-\u0441\u0435\u0441\u0441\u0438\u0438 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0445\u043e\u0441\u0442\u0435, \u043e\u0442\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0442 \u0442\u043e\u0433\u043e, \u0433\u0434\u0435 \u043e\u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0430\u0441\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430). \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u043e\u043c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 HTTP/3 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a API, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 ACME \u0438 \u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c:\n\n1\ufe0f\u20e3 \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Angie 1.8.2\n2\ufe0f\u20e3 \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Angie PRO 1.8.2\n\n\u0412\u0441\u0435\u043c \u0434\u043e\u0431\u0440\u043e\u0433\u043e \u0434\u043d\u044f, \u0445\u043e\u0440\u043e\u0448\u0438\u0445 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445!", "creation_timestamp": "2026-08-29T18:00:05.856172Z"}, {"uuid": "1b9026b5-a8be-4aaf-8f70-7e0c1d33d4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23419", "type": "seen", "source": "https://t.me/angie_software/81", "content": "Angie \u0438 Angie PRO \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 1.8.2\n\n\u041c\u044b \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Angie \u0438 \u0435\u0433\u043e \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e Angie PRO \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.8.2.\n\n\u0412 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0CVE-2025-23419, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u043d\u0435\u0435 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 nginx 1.27.4 (\u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 TLS-\u0441\u0435\u0441\u0441\u0438\u0438 \u0432 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u043c \u0445\u043e\u0441\u0442\u0435, \u043e\u0442\u043b\u0438\u0447\u043d\u043e\u043c \u043e\u0442 \u0442\u043e\u0433\u043e, \u0433\u0434\u0435 \u043e\u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u043b\u0430\u0441\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430). \n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u043e\u0434\u0441\u0447\u0435\u0442\u043e\u043c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 HTTP/3 \u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043a API, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0434\u043e\u043c\u0435\u043d\u043d\u044b\u0445 \u0438\u043c\u0435\u043d \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 ACME \u0438 \u043f\u0430\u0434\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0447\u0438\u0442\u0430\u0439\u0442\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c:\n\n1\ufe0f\u20e3 \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Angie 1.8.2\n2\ufe0f\u20e3 \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 Angie PRO 1.8.2\n\n\u0412\u0441\u0435\u043c \u0434\u043e\u0431\u0440\u043e\u0433\u043e \u0434\u043d\u044f, \u0445\u043e\u0440\u043e\u0448\u0438\u0445 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445!", "creation_timestamp": "2026-08-30T00:00:53.218314Z"}]}