CVE-2024-12925

Published: Sep 1, 2025Modified: Jun 17, 2026Deferred

7.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 3.9 / Impact: 3.4

Source: iletisim@usom.gov.tr (Secondary)

Description

Improper Validation of Certificate with Host Mismatch vulnerability in Akınsoft QR Menü allows HTTP Response Splitting. This issue affects QR Menü: from s1.05.05 before v1.05.12.

Related CWEs

CWE-297

Improper Validation of Certificate with Host Mismatch

The product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.

References (2)

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0202

Source: iletisim@usom.gov.tr

https://www.usom.gov.tr/bildirim/tr-25-0202

Source: iletisim@usom.gov.tr

Timeline

No history available yet.