Vulnerability details
CVE-2025-13033
Red Hat Advanced Cluster Management for Kubernetes 2nodemailer nodemailer
Nodemailer: nodemailer: email to an unintended domain can occur due to interpretation conflict
CVSS 3.1
7.5High
Official description
A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the email to the attacker's external address instead of the intended internal recipient. This could lead to a significant data leak of sensitive information and allow an attacker to bypass security filters and access controls.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.5High | 3.1 | CVEProject cvelistV5 (CNA) (redhat) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | All | CVEProject cvelistV5 (CNA) |
| nodemailer | nodemailer | v < 7.0.7 | CVEProject cvelistV5 (CNA) |
References and advisories
7- https://access.redhat.com/errata/RHSA-2026:15979 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:3751 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-13033 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2402179 issue-trackingx_refsource_REDHAT
- https://github.com/nodemailer/nodemailer
- https://github.com/nodemailer/nodemailer/commit/1150d99fba77280df2cfb1885c43df23109a8626
- https://github.com/nodemailer/nodemailer/security/advisories/GHSA-mm7p-fcc7-pg87
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-11-14
- Last updated
- 2026-05-11
- State
- Published
- Assigner (CNA)
- redhat
Exploit prediction (EPSS)
0.57%
Probability of exploitation in 30 days
47.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-1286Improper Validation of Syntactic Correctness of Input