CVE-2024-30129CWE-644

HCL Nomad server on Domino is affected by a host header injection vulnerability

Medium · published December 6, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
22.5
In the wild
Unconfirmed
What it is

The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00309 · 22.5th percentile
Weakness
CWE-644 · Improper Neutralization of HTTP Headers for Scripting Syntax
Published
2024-12-06T15:57Z
EPSS history
Timeline
  • 06 DEC 15:57Z
    HCL Nomad server on Domino is affected by a host header injection vulnerability
    cvelistv5