CVE-2025-25198 PoC: Mailcow Host Header Password Reset Poisoning (< 2025-01a)

This repository provides a proof-of-concept (PoC) for CVE-2025-25198, a Host Header Injection vulnerability in the password reset workflow of mailcow: dockerized (< 2025-01a). The application improperly trusts the Host header when generating password reset links, allowing an attacker to poison the reset URL and redirect victims to an attacker-controlled domain. This may lead to account takeover if a victim clicks the malicious link. The PoC automates validation by spinning up a local HTTPS listener, handling session cookies and CSRF tokens automatically, and capturing the first valid reset link. This code is intended strictly for authorized security testing and developer verification. The issue is patched in mailcow version 2025-01a.