← Vulnerability feed

Vulnerability record · CVE-2025-61132 · published 23 October 2025

CVE-2025-61132: A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remot…

A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's url_for(_external=True) generates reset links without a fixed SERVER_NAME.

7.1 CVSS 3.1 High EPSS 0.37% · top 71.4% CWE-620 · CWE-620 Deferred
7.1CVSS 3.1 base score
0.37%EPSS exploitation probability, 30 days
NoNot in CISA KEV
0Affected product versions listed by NVD
5References
17 Jun 2026Last modified by NVD

Description

A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's url_for(_external=True) generates reset links without a fixed SERVER_NAME.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

References

LinkTags
https://drive.google.com/file/d/1FmkctLdOTGMdy6GgLaTzfxemdVDeiA7J/view?usp=sharing
https://gist.github.com/BrookeYangRui/94c3bee0c2cbc1ed81a21d4448550c21
https://github.com/levlaz/braindump/blob/9640dd03f99851dbd34dd6cac98a747a4a591b01/app/auth/views.py#L131-L148
https://github.com/levlaz/braindump/blob/9640dd03f99851dbd34dd6cac98a747a4a591b01/app/templates/auth/email/reset_passwor
https://portswigger.net/web-security/host-header/exploiting/password-reset-poisoning

Track CVE-2025-61132 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2025-61132), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.