CVE-2025-4296

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing. This issue affects B2B: before 04.06.2025...

CVE-2025-4294

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...

CVE-2025-4295

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4296

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing. This issue affects B2B: before 04.06.2025...

CVE-2025-4296

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing. This issue affects B2B: before 04.06.2025...

CVE-2025-4296

CVE-2025-4296 describes an Open Redirect vulnerability in HotelRunner B2B (before 04.06.2025). The issue affects HotelRunner B2B, enabling forceful browsing via untrusted URL redirection. Root cause is improper handling of redirects leading to navigation to external sites. Exploitation details ar...

CVE-2025-4296 Open Redirect in HotelRunner's B2B

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing. This issue affects B2B: before 04.06.2025...

CVE-2025-4296 Open Redirect in HotelRunner's B2B

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in HotelRunner B2B allows Forceful Browsing.This issue affects B2B: before 04.06.2025...

HotelRunner B2B 输入验证错误漏洞

HotelRunner B2B is a software tool for business management and collaboration for the hotel industry from HotelRunner Turkey. An input validation error vulnerability exists in HotelRunner B2B versions prior to 04.06.2025, which stems from a URL redirection that could lead to forced browsing...

PT-2025-30571

Name of the Vulnerable Software and Affected Versions HotelRunner B2B versions prior to 04.06.2025 Description An open redirect issue exists in HotelRunner B2B, potentially allowing forceful browsing through URL redirection to untrusted sites. Recommendations Update HotelRunner B2B to version...

CVE-2025-4295

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4294

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...

CVE-2025-4295 Host Header Injection in HotelRunner's B2B

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4295 Host Header Injection in HotelRunner's B2B

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4295

Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting. This issue affects B2B: before 04.06.2025...

CVE-2025-4295

HotelRunner B2B is affected by CVE-2025-4295 due to improper validation of TLS certificates with host mismatches, enabling HTTP response splitting. The issue impacts HotelRunner B2B versions prior to 04.06.2025. Root cause and affected component: certificate host name validation flaw in the B2B p...

CVE-2025-4294 XSS in HotelRunner's B2B

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...

CVE-2025-4294

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...

CVE-2025-4294

CVE-2025-4294: HotelRunner B2B has an XSS flaw due to improper neutralization of input during web page generation in versions prior to 04.06.2025. Affects HotelRunner B2B; impact is Cross-Site Scripting with potential user interaction required. Remediation: update to version 04.06.2025 or later. ...

CVE-2025-4294 XSS in HotelRunner's B2B

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in HotelRunner B2B allows Cross-Site Scripting XSS. This issue affects B2B: before 04.06.2025...