{"metadata": {"vulnerability": "cve-2025-25198", "count": 18, "kinds": {"milestone": 3, "sighting": 9, "kev": 0, "other": 6}}, "data": [{"timestamp": "2025-02-03T19:30:53.400Z", "date_only": false, "value": "2025-02-03T19:30:53.400Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-25198", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-12T17:46:06.491Z", "date_only": false, "value": "2025-02-12T17:46:06.491Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-25198", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-12T17:46:06.491Z", "date_only": false, "value": "2025-02-12T17:46:06.491Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2025-25198", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-12T17:52:24.209Z", "date_only": false, "value": "2025-02-12T17:52:24.209054Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113992187494675681", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "fd32660c-5d36-4941-9a78-8d31b7c9bde1", "url": "https://infosec.exchange/users/cve/statuses/113992187494675681"}, {"timestamp": "2025-02-12T18:15:27.757Z", "date_only": false, "value": "2025-02-12T18:15:27.757", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25198", "record": "FKIE_CVE-2025-25198", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-02-12T18:15:49.640Z", "date_only": false, "value": "2025-02-12T18:15:49.640184Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr7c7jn2s", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "f599da62-90d5-4f56-b6bd-fb307282dfa4", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr7c7jn2s"}, {"timestamp": "2025-02-12T19:51:49.806Z", "date_only": false, "value": "2025-02-12T19:51:49.806238Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-25198", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-12T19:51:49.806Z", "date_only": false, "value": "2025-02-12T19:51:49.806238Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25198", "record": "FKIE_CVE-2025-25198", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-12T19:52:25.823Z", "date_only": false, "value": "2025-02-12T19:52:25.823Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-25198", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-12T19:52:25.823Z", "date_only": false, "value": "2025-02-12T19:52:25.823Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-25198", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-12T20:14:00Z", "date_only": false, "value": "2025-02-12T20:14:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17906", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "22ea509b-c635-440f-89e4-376ceeb2a1f3", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-25198 - Mailcow: Dockerized Host Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-25198 \nPublished : Feb. 12, 2025, 6:15 p.m. | 46\u00a0minutes ago \nDescription : mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the `Host HTTP` header to generate a password reset link pointing to an attacker-controlled domain. This can lead to account takeover if a user clicks the poisoned link. Version 2025-01a contains a patch. As a workaround, deactivate the password reset functionality by clearing `Notification email sender` and `Notification email subject` under System -> Configuration -> Options -> Password Settings. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17906"}, {"timestamp": "2025-02-17T08:09:00.771Z", "date_only": false, "value": "2025-02-17T08:09:00.771235Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3liec6nuzqc2y", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "561719c2-5fcc-4d2e-8b71-df4083cfd73b", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3liec6nuzqc2y"}, {"timestamp": "2025-10-14T09:00:05Z", "date_only": false, "value": "2025-10-14T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sHgA-eh7Ixai0xpiEbF_fK8-0YyKLTE6GOn4mKGdY4CpWPE", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "60657d14-1272-40ce-b358-27a6a8449580", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-10-16T21:02:46.105Z", "date_only": false, "value": "2025-10-16T21:02:46.105308Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrmmehl2j", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "dab4a77c-4400-4a95-a2e6-849d9700b301", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrmmehl2j"}, {"timestamp": "2025-10-18T02:20:27Z", "date_only": false, "value": "2025-10-18T02:20:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/55920", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "2b120dd3-fda0-4830-a08a-06ee527b24bd", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPoC for CVE-2025-25198: automated Host header poisoning test for Mailcow - HTTPS listener, automatic cookie/CSRF handling, captures first reset link.\nURL\uff1ahttps://github.com/Groppoxx/CVE-2025-25198-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/55920", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-03-03T11:12:08.150Z", "date_only": false, "value": "2026-03-03T11:12:08.150105Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mg5n53vzog2j", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "586d1f46-a8bb-4107-a9e7-61def984794f", "url": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mg5n53vzog2j"}, {"timestamp": "2026-03-04T21:02:34.717Z", "date_only": false, "value": "2026-03-04T21:02:34.717788Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgb6lqcoai2q", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "460fba22-3622-46d3-8d40-59a174afac7c", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mgb6lqcoai2q"}, {"timestamp": "2026-06-17T09:00:28.110Z", "date_only": false, "value": "2026-06-17T09:00:28.110", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-25198", "record": "FKIE_CVE-2025-25198", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-15T21:29:22.737Z", "anchors": {"origin": {"timestamp": "2025-02-12T17:46:06.491Z", "date_only": false, "value": "2025-02-12T17:46:06.491Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-25198", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-02-12T17:46:06.491Z", "date_only": false, "value": "2025-02-12T17:46:06.491Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-25198", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-10-14T09:00:05Z", "date_only": false, "value": "2025-10-14T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sHgA-eh7Ixai0xpiEbF_fK8-0YyKLTE6GOn4mKGdY4CpWPE", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "60657d14-1272-40ce-b358-27a6a8449580", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 21050038.509, "hours": 5847.232919166667, "days": 243.63470496527776, "min_seconds": 21050038.509, "max_seconds": 21050038.509, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-12T17:46:06.491Z", "date_only": false, "value": "2025-02-12T17:46:06.491Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-25198", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-10-14T09:00:05Z", "date_only": false, "value": "2025-10-14T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sHgA-eh7Ixai0xpiEbF_fK8-0YyKLTE6GOn4mKGdY4CpWPE", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "60657d14-1272-40ce-b358-27a6a8449580", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 55395796.246738, "hours": 15387.721179649445, "days": 641.1550491520602, "min_seconds": 55395796.246738, "max_seconds": 55395796.246738, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-02-12T17:46:06.491Z", "date_only": false, "value": "2025-02-12T17:46:06.491Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-25198", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T21:29:22.737Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 34345757.737738, "hours": 9540.488260482778, "days": 397.5203441867824, "min_seconds": 34345757.737738, "max_seconds": 34345757.737738, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-10-14T09:00:05Z", "date_only": false, "value": "2025-10-14T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sHgA-eh7Ixai0xpiEbF_fK8-0YyKLTE6GOn4mKGdY4CpWPE", "record": "CVE-2025-25198", "field": "creation_timestamp", "uuid": "60657d14-1272-40ce-b358-27a6a8449580", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T21:29:22.737Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}