HotelRunner B2B HTTP Response Splitting Vulnerability Due to Improper Certificate Validation
Vulnerability
A vulnerability allowing HTTP response splitting has been identified in HotelRunner B2B, prior to June 4, 2025. This issue arises from improper validation of certificates, leading to a host mismatch.
Impact
Exploitation of this vulnerability could allow for HTTP response splitting, which can be used in various attacks such as web cache poisoning or cross-site scripting.
Remediation
Users are advised to upgrade to versions released on or after June 4, 2025.
Added: Jul 22, 2025, 2:22 PM
Updated: Jul 22, 2025, 2:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
5.2remediation
7.7relevance
0.3threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.