| शीर्षक | Mailcow mailcow-dockerized < 2025-01a Host Header Injection |
|---|
| विवरण | mailcow: dockerized versions prior to 2025-01a are vulnerable to Host Header Injection in the password reset workflow.
The application improperly trusts the Host header when generating password reset links, allowing an attacker to poison the reset URL and redirect victims to an attacker-controlled domain.
This may result in account takeover if a victim clicks the malicious reset link.
The issue was patched in version 2025-01a. |
|---|
| स्रोत | ⚠️ https://github.com/Groppoxx/CVE-2025-25198-PoC.git |
|---|
| उपयोगकर्ता | Maizeravla (UID 95621) |
|---|
| सबमिशन | 16/02/2026 09:35 AM (8 महीनों पहले) |
|---|
| संयम | 18/02/2026 07:13 PM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 295560 [mailcow dockerized 2024-04 Redirect] |
|---|
| अंक | 0 |
|---|