CVE-2024-12973
BaseFortify
Publication date: 2025-09-02
Last updated on: 2025-09-02
Assigner: Computer Emergency Response Team of the Republic of Turkey
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| akinsoft | octocloud | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-346 | The product does not properly verify that the source of data or communication is valid. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Origin Validation Error in Akinsoft OctoCloud that allows HTTP Response Splitting and Forceful Browsing (CAPEC-87). It affects versions from s1.09.01 before v1.11.01. HTTP Response Splitting can enable attackers to manipulate web responses, potentially leading to security issues such as cache poisoning or cross-site scripting.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing attackers to perform HTTP Response Splitting and Forceful Browsing attacks, which may lead to information disclosure, manipulation of web content, and potentially unauthorized access or actions within the affected application.