PT-2025-30571 · Hotelrunner · Hotelrunner B2B

Berat Arslan · Published 2025-07-23 · Updated 2026-06-05 · CVE-2025-4296

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions HotelRunner B2B versions prior to 04.06.2025

Description An open redirect issue exists in HotelRunner B2B, potentially allowing forceful browsing through URL redirection to untrusted sites.

Recommendations Update HotelRunner B2B to version 04.06.2025 or later.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-4296

Affected Products

Hotelrunner B2B

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-4296 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0169 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0169 · Note
• https://t.me/cveNotify/166215 · Telegram Post
• https://t.me/cveNotify/129970 · Telegram Post
• https://twitter.com/CVEnew/status/1947988030968512716 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1948049978422698063 · Twitter Post