CVE-2024-12925
BaseFortify
Publication date: 2025-09-01
Last updated on: 2025-09-02
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| akinsoft | qr_menü | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-297 | The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Improper Validation of Certificate with Host Mismatch in Akınsoft QR Menü, which allows HTTP Response Splitting. It affects versions from s1.05.05 before v1.05.12.
How can this vulnerability impact me? :
The vulnerability can lead to HTTP Response Splitting attacks, which may allow attackers to manipulate HTTP responses, potentially causing information disclosure, user redirection, or other malicious impacts. The CVSS score indicates it has a moderate to high impact on confidentiality, integrity, and availability.