CVE-2025-23001

Summary

CVE-2025-23001 is a Host Header Injection vulnerability discovered in CTFd 3.7.5. This issue arises because the application does not adequately validate or sanitize the Host header in HTTP requests. An attacker can exploit this vulnerability by manipulating the Host header to launch phishing attacks, reset user passwords, or perform cache poisoning. This threat poses a significant risk to system security and requires immediate remediation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.