CVE-2025-25198

Summary

CVE-2025-25198 is a vulnerability affecting the mailcow:dockerized open source email suite before version 2025-01a. This issue permits attackers to manipulate `Host HTTP` headers in password reset links, directing users to attacker-controlled domains. Consequences of this vulnerability include account takeover if a user clicks the malicious link. Version 2025-01a incorporates a patch, and a workaround involves disabling the password reset functionality by clearing the `Notification email sender` and `Notification email subject` under System -> Configuration -> Options -> Password Settings.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.