PT-2025-35549 · Akinsoft · Akinsoft Octocloud

Berat Arslan · Published 2025-09-02 · Updated 2025-09-02 · CVE-2024-12973

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Akinsoft OctoCloud versions s1.09.01 through v1.11.00

Description An origin validation error exists in Akinsoft OctoCloud, enabling HTTP response splitting. This issue is categorized as CAPEC - 87 - Forceful Browsing.

Recommendations Update Akinsoft OctoCloud to version v1.11.01 or later.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2024-12973

Affected Products

Akinsoft Octocloud

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12973 · Security Note
• https://t.me/cveNotify/134057 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1962898483918115280 · Twitter Post
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0203 · Note
• https://usom.gov.tr/bildirim/tr-25-0203 · Note
• https://twitter.com/CVEnew/status/1962845621204680721 · Twitter Post
• https://t.me/CVEtracker/31491 · Telegram Post