PT-2025-47000

CVE-2025-13033

·

Published

2025-10-07

·

Updated

2026-10-19

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Email Parsing Library (affected versions not specified)
Description A flaw exists in the email parsing library related to how recipient email addresses are processed. Specifically, the library improperly handles specially formatted addresses, allowing an attacker to redirect emails intended for internal recipients to an external address controlled by the attacker. This is achieved by crafting a recipient address that includes an external address within quotes. Successful exploitation could result in a data leak of sensitive information and bypass security measures.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
GHSA-JJ37-3377-M6VV
GHSA-MM7P-FCC7-PG87
ECHO-23AF-6658-B0F8
Found an issue in the description? Have something to add? Feel free to write us 👾