CVE & CISA-KEV CatalogNVD
CVE-2025-13033
HIGH7.5
CVSS v3
Description
A vulnerability was identified in the email parsing library due to improper handling of specially formatted recipient email addresses. An attacker can exploit this flaw by crafting a recipient address that embeds an external address within quotes. This causes the application to misdirect the email to the attacker's external address instead of the intended internal recipient. This could lead to a significant data leak of sensitive information and allow an attacker to bypass security filters and access controls.
How to fix
Remediation Available
node-nodemailerDebian
Fixed in:6.10.0+~6.4.17-1+deb13u1CVE-2025-13033
Fixed in:7.0.9+~7.0.2-1CVE-2025-13033
registry.redhat.io/rhceph/grafanaRed Hat / RHEL
Fixed in:rhel9@sha256:c27690e36faf7db08a6d398cce7dbedcfe74848224a179c7278b62315516dd4a_arm64RHSA-2026:15979
Fixed in:rhel9@sha256:67d65ecfe844febb7afdfcfbdc0a31f3bd9dfb4c3c81f4734a1b146e34d8d5cb_ppc64leRHSA-2026:15979
Fixed in:rhel9@sha256:a6a8bbdd49272c632edd96e1598d1e697ba3a1dabb8d36086eced4847de59cbb_s390xRHSA-2026:15979
Fixed in:rhel9@sha256:3d4903b8dbe33464c05ce219ee2e945bf1be169efbed73caee5185883c9df508_amd64RHSA-2026:15979
registry.redhat.io/rhceph/grafanaRocky
Fixed in:rhel9@sha256:3d4903b8dbe33464c05ce219ee2e945bf1be169efbed73caee5185883c9df508_amd64RHSA-2026:15979
Fixed in:rhel9@sha256:67d65ecfe844febb7afdfcfbdc0a31f3bd9dfb4c3c81f4734a1b146e34d8d5cb_ppc64leRHSA-2026:15979
Fixed in:rhel9@sha256:c27690e36faf7db08a6d398cce7dbedcfe74848224a179c7278b62315516dd4a_arm64RHSA-2026:15979
Fixed in:rhel9@sha256:a6a8bbdd49272c632edd96e1598d1e697ba3a1dabb8d36086eced4847de59cbb_s390xRHSA-2026:15979
registry.redhat.io/rhceph/keepalivedRocky
Fixed in:rhel9@sha256:fa3c9307038f92e351892be9c73cda40a3bab2038904fabcb97dad5568dcec2d_s390xRHSA-2026:15979
Fixed in:rhel9@sha256:2ce063cc246e7694adf066c17390b4c8d95719b2786267a9db64390407648410_amd64RHSA-2026:15979
Fixed in:rhel9@sha256:02914a917bbea40c35be2cc7dbaf05c5ac1e1bd30b0e82b4ad9a1c58b99a076b_ppc64leRHSA-2026:15979
Fixed in:rhel9@sha256:aeb508e1309d4a811f881f4028e1c370a5431d290aca2c4af5acdf6a58916a7f_arm64RHSA-2026:15979
registry.redhat.io/rhceph/keepalivedRed Hat / RHEL
Fixed in:rhel9@sha256:2ce063cc246e7694adf066c17390b4c8d95719b2786267a9db64390407648410_amd64RHSA-2026:15979
Fixed in:rhel9@sha256:aeb508e1309d4a811f881f4028e1c370a5431d290aca2c4af5acdf6a58916a7f_arm64RHSA-2026:15979
Fixed in:rhel9@sha256:02914a917bbea40c35be2cc7dbaf05c5ac1e1bd30b0e82b4ad9a1c58b99a076b_ppc64leRHSA-2026:15979
Fixed in:rhel9@sha256:fa3c9307038f92e351892be9c73cda40a3bab2038904fabcb97dad5568dcec2d_s390xRHSA-2026:15979
registry.redhat.io/rhceph/oauth2Rocky
Fixed in:proxy-rhel9@sha256:0f37c554cc22c9c89cc4c53739b2ef86e84287486e3f7cdbad10a6e53439d596_s390xRHSA-2026:15979
Fixed in:proxy-rhel9@sha256:9e15073c7782b0194c06e0b420573e49d5719002417faa567c99ee8409ff590d_amd64RHSA-2026:15979
Fixed in:proxy-rhel9@sha256:1a8207fe81e8c5bd63568eddddb41dd0da16d8340c5f5ae3615fe46ae864a163_ppc64leRHSA-2026:15979
Fixed in:proxy-rhel9@sha256:f76307e201d0b2deaf0aa96bc6b62fc4535c8358b06a8e95ec5a8abf10d2da07_arm64RHSA-2026:15979
registry.redhat.io/rhceph/oauth2Red Hat / RHEL
Fixed in:proxy-rhel9@sha256:9e15073c7782b0194c06e0b420573e49d5719002417faa567c99ee8409ff590d_amd64RHSA-2026:15979
Fixed in:proxy-rhel9@sha256:0f37c554cc22c9c89cc4c53739b2ef86e84287486e3f7cdbad10a6e53439d596_s390xRHSA-2026:15979
Fixed in:proxy-rhel9@sha256:1a8207fe81e8c5bd63568eddddb41dd0da16d8340c5f5ae3615fe46ae864a163_ppc64leRHSA-2026:15979
Fixed in:proxy-rhel9@sha256:f76307e201d0b2deaf0aa96bc6b62fc4535c8358b06a8e95ec5a8abf10d2da07_arm64RHSA-2026:15979
registry.redhat.io/rhceph/rhcephRocky
Fixed in:8-rhel9@sha256:f7e87de708186099c76426f24b53395340a672e282615164bac73afca3f36454_arm64RHSA-2026:15979
Fixed in:haproxy-rhel9@sha256:8b20b6abf0399bbfc970990bc0c5b6dab46c1043ef761519dbbe8213e6fdd169_amd64RHSA-2026:15979
Fixed in:promtail-rhel9@sha256:e0e44241bde7bfbccea69d06e5fd00ad0a0ab569bef6645687bcadcfc00aa5ef_amd64RHSA-2026:15979
Fixed in:8-rhel9@sha256:b2875bcf5aee1175faa2ab1ce163642e17c4948ff5aa76967d008f75b470fc74_amd64RHSA-2026:15979
Fixed in:haproxy-rhel9@sha256:4c8c8ef82f2f2685d76a9535523c4c93485329aa23328a68426e93789f363b53_arm64RHSA-2026:15979
Fixed in:promtail-rhel9@sha256:3b78f446debe56d01cd96dc3c3ae225a982ee6abdd7d2fabae553cf4c87e471a_arm64RHSA-2026:15979
Fixed in:haproxy-rhel9@sha256:7fa04ae06b25476b7b2a3f9e21279202571fd8fc5ff5012c980caf3f33edc0a5_s390xRHSA-2026:15979
Fixed in:promtail-rhel9@sha256:28aae4d07691c86cdfa9bbfcc7b68e1a3304402ac6c65982bfc0f7945cb9a44e_s390xRHSA-2026:15979
Fixed in:8-rhel9@sha256:5c496cafb1e21883677c6dcb9fd7392383325b8529b98648af757545dfe59488_s390xRHSA-2026:15979
Fixed in:haproxy-rhel9@sha256:0350448bf1fb15f26c0d092ceb8b0618932f42d30ca4c7c62f2ec1b86c20dd23_ppc64leRHSA-2026:15979
Fixed in:promtail-rhel9@sha256:cbc542505b4784050c96b3fb31a4867b5d94c8a6957b54a8cfad03bc16a19578_ppc64leRHSA-2026:15979
Fixed in:8-rhel9@sha256:df6bf531755753b224999cb9a5f087c96e8a512666589df4763d4a14941a6f5a_ppc64leRHSA-2026:15979
registry.redhat.io/rhceph/rhcephRed Hat / RHEL
Fixed in:haproxy-rhel9@sha256:8b20b6abf0399bbfc970990bc0c5b6dab46c1043ef761519dbbe8213e6fdd169_amd64RHSA-2026:15979
Fixed in:promtail-rhel9@sha256:e0e44241bde7bfbccea69d06e5fd00ad0a0ab569bef6645687bcadcfc00aa5ef_amd64RHSA-2026:15979
Fixed in:8-rhel9@sha256:b2875bcf5aee1175faa2ab1ce163642e17c4948ff5aa76967d008f75b470fc74_amd64RHSA-2026:15979
Fixed in:haproxy-rhel9@sha256:4c8c8ef82f2f2685d76a9535523c4c93485329aa23328a68426e93789f363b53_arm64RHSA-2026:15979
Fixed in:promtail-rhel9@sha256:3b78f446debe56d01cd96dc3c3ae225a982ee6abdd7d2fabae553cf4c87e471a_arm64RHSA-2026:15979
Fixed in:8-rhel9@sha256:f7e87de708186099c76426f24b53395340a672e282615164bac73afca3f36454_arm64RHSA-2026:15979
Fixed in:haproxy-rhel9@sha256:7fa04ae06b25476b7b2a3f9e21279202571fd8fc5ff5012c980caf3f33edc0a5_s390xRHSA-2026:15979
Fixed in:promtail-rhel9@sha256:28aae4d07691c86cdfa9bbfcc7b68e1a3304402ac6c65982bfc0f7945cb9a44e_s390xRHSA-2026:15979
Fixed in:8-rhel9@sha256:5c496cafb1e21883677c6dcb9fd7392383325b8529b98648af757545dfe59488_s390xRHSA-2026:15979
Fixed in:haproxy-rhel9@sha256:0350448bf1fb15f26c0d092ceb8b0618932f42d30ca4c7c62f2ec1b86c20dd23_ppc64leRHSA-2026:15979
Fixed in:promtail-rhel9@sha256:cbc542505b4784050c96b3fb31a4867b5d94c8a6957b54a8cfad03bc16a19578_ppc64leRHSA-2026:15979
Fixed in:8-rhel9@sha256:df6bf531755753b224999cb9a5f087c96e8a512666589df4763d4a14941a6f5a_ppc64leRHSA-2026:15979
registry.redhat.io/rhceph/snmpRed Hat / RHEL
Fixed in:notifier-rhel9@sha256:bf282440c8e3ce4d38535bb1efdcbc05f0278647d2fc6e2a13c9c28c0c101f79_ppc64leRHSA-2026:15979
Fixed in:notifier-rhel9@sha256:5ccb9e878551c910e3a300ab8043fdc4788381c9515dc9dcaa965a738d2de059_s390xRHSA-2026:15979
Fixed in:notifier-rhel9@sha256:7559ec0119f673e243361d4e457a8e9687beb3af60a4fd608fa211539b9034c1_arm64RHSA-2026:15979
Fixed in:notifier-rhel9@sha256:808082ac26e53bc7f962428d8e67f721654b732eb1d40fc6e272fcb7f045797c_amd64RHSA-2026:15979
registry.redhat.io/rhceph/snmpRocky
Fixed in:notifier-rhel9@sha256:bf282440c8e3ce4d38535bb1efdcbc05f0278647d2fc6e2a13c9c28c0c101f79_ppc64leRHSA-2026:15979
Fixed in:notifier-rhel9@sha256:5ccb9e878551c910e3a300ab8043fdc4788381c9515dc9dcaa965a738d2de059_s390xRHSA-2026:15979
Fixed in:notifier-rhel9@sha256:7559ec0119f673e243361d4e457a8e9687beb3af60a4fd608fa211539b9034c1_arm64RHSA-2026:15979
Fixed in:notifier-rhel9@sha256:808082ac26e53bc7f962428d8e67f721654b732eb1d40fc6e272fcb7f045797c_amd64RHSA-2026:15979
registry.redhat.io/rhdh/rhdhRocky
Fixed in:rhel9-operator@sha256:c963d74818ba253dc900389712e83ee14b0d1cf499a188e16de48db826685014_amd64RHSA-2026:3751
Fixed in:operator-bundle@sha256:be3276aa08b84a3e897b53d27d270285a6a36012ad4444b9ee3ee97a90ab9a1a_amd64RHSA-2026:3751
Fixed in:hub-rhel9@sha256:141aeba778033153ed7005785565c8f3a00f6353be7bb3fd9124d8ad9375d988_amd64RHSA-2026:3751
registry.redhat.io/rhdh/rhdhRed Hat / RHEL
Fixed in:operator-bundle@sha256:be3276aa08b84a3e897b53d27d270285a6a36012ad4444b9ee3ee97a90ab9a1a_amd64RHSA-2026:3751
Fixed in:rhel9-operator@sha256:c963d74818ba253dc900389712e83ee14b0d1cf499a188e16de48db826685014_amd64RHSA-2026:3751
Fixed in:hub-rhel9@sha256:141aeba778033153ed7005785565c8f3a00f6353be7bb3fd9124d8ad9375d988_amd64RHSA-2026:3751
TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityHigh
IntegrityNone
AvailabilityNone
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploit Intelligence
0.54%probability of exploitation in 30 days
42ndpercentile
Moderate risk: more likely to be exploited than 42% of all known CVEs.
References
Related Vulnerabilities
Other CWE-1286 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2024-7954 | Critical | 9.8 | 90% | - | Fix |
| CVE-2025-13878 | High | 7.5 | 8.2% | - | Fix |
| CVE-2024-51983 | High | 7.5 | 7.8% | - | - |
| CVE-2026-21527 | High | 6.5 | 7.7% | - | Fix |
| CVE-2024-51982 | High | 7.5 | 7.1% | - | - |
| CVE-2023-27043 | Medium | 5.3 | 2.5% | - | Fix |
Embed a live status badge for CVE-2025-13033
Markdown
[](https://tridentstack.com/cve/CVE-2025-13033)HTML
<a href="https://tridentstack.com/cve/CVE-2025-13033"><img src="https://tridentstack.com/cve/badge/CVE-2025-13033.svg" alt="CVE-2025-13033"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-05-11.