https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 08:30:56 +0000 https://vulnerability.circl.lu/vuln/cve-2025-64425 <p><strong>Affected:</strong> coollabsio coolify</p> <p>Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, an attacker can initiate a password reset for a victim, and modify the host header of the request to a malicious value. The victim will receive a password reset email, with a link to the malicious host. If the victim clicks this link, their reset token is sent to the attacker&#39;s server, allowing the attacker to use it to change the victim&#39;s password and takeover their account. As of time of publication, it is unclear if a patch is available.</p> <p><strong>Affected:</strong> coollabsio coolify</p> <p>Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. In Coolify versions up to and including v4.0.0-beta.434, an attacker can initiate a password reset for a victim, and modify the host header of the request to a malicious value. The victim will receive a password reset email, with a link to the malicious host. If the victim clicks this link, their reset token is sent to the attacker&#39;s server, allowing the attacker to use it to change the victim&#39;s password and takeover their account. As of time of publication, it is unclear if a patch is available.</p> https://vulnerability.circl.lu/vuln/cve-2025-64425