CVE-2024-12973CWE-346

Host Header Injection in Akinsoft's OctoCloud

Medium · published September 2, 2025

CVSS v3.1
4.7
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing.

This issue affects OctoCloud: from s1.09.01 before v1.11.01.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00149 · 3.7th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2025-09-02T11:43Z
EPSS history
Timeline
  • 02 SEP 11:43Z
    Host Header Injection in Akinsoft's OctoCloud
    cvelistv5