PT-2025-30417 · Unknown · Hotelrunner B2B

Berat Arslan · Published 2025-07-22 · Updated 2025-07-22 · CVE-2025-4295

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions HotelRunner B2B versions prior to 04.06.2025

Description This issue involves improper validation of certificates with host mismatches, leading to HTTP Response Splitting in HotelRunner B2B.

Recommendations Update HotelRunner B2B to version 04.06.2025 or later.

Fix

Weakness Enumeration

CWE-297

Related Identifiers

CVE-2025-4295

Affected Products

Hotelrunner B2B

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-4295 · Security Note
• https://t.me/CVEtracker/28379 · Telegram Post
• https://twitter.com/CVEnew/status/1947662668778676511 · Twitter Post
• https://t.me/cvetracker/28379 · Telegram Post
• https://usom.gov.tr/bildirim/tr-25-0169 · Note
• https://twitter.com/VulmonFeeds/status/1947673698871234582 · Twitter Post