Threats Tagged 'cve-2025-64425'
View all threats tagged with 'cve-2025-64425'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-64425'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-64425 is a high-severity vulnerability in Coolify versions up to 4.0.0-beta.434, an open-source server and application management tool. The flaw involves improper neutralization of HTTP headers, specifically allowing an attacker to manipulate the Host header during a password reset request. This manipulation causes the victim to receive a password reset email containing a link pointing to a malicious host controlled by the attacker. If the victim clicks the link, their reset token is leaked to the attacker, enabling account takeover. No authentication or privileges are required to exploit this vulnerability, but user interaction (clicking the malicious link) is necessary. There is no known patch at the time of publication, and no known exploits in the wild have been reported. The CVSS v4. Join the discussion | CVE Database V5 | 01/05/2026, 20:49:10 UTC Added: 01/05/2026, 20:52:55 UTC |
Showing 1 to 1 of 1 result