QSearchQSearch

CVE-2025-4295

4.6 MEDIUM

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting

Published: 2025-07-22 · Last updated: 2026-06-05

Severity and scoring

CVSS
4.6 MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CWE
CWE-297

Description

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025.

Source: NVD

References

Related CVEs

Same CWE

  • CVE-2026-12162 — Improper host validation in the social login autofill feature in Devolutions Remote Desktop Manager 2026.2.8 allows an attacker to disc... (5.5 MEDIUM)
  • CVE-2026-44393 — An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0 (7.4 HIGH)
  • CVE-2026-35563 — It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDA... (8.5 HIGH)
  • CVE-2026-42790 — Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS nameConstraints ... (8.1 HIGH)
  • CVE-2026-44467 — The Claude Desktop app gives you Claude Code with a graphical interface built for running multiple sessions side by side (6.8 MEDIUM)