CVE-2024-12973

MEDIUM

Akinsoft OctoCloud <1.11.01 - SSRF

Title source: llm

Description

Origin Validation Error vulnerability in Akinsoft OctoCloud allows HTTP Response Splitting, CAPEC - 87 - Forceful Browsing.This issue affects OctoCloud: from s1.09.01 before v1.11.01.

References (1)

Scores

CVSS v3 4.7
EPSS 0.0002
EPSS Percentile 5.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Classification

CWE
CWE-346
Status draft

Timeline

Published Sep 02, 2025
Tracked Since Feb 18, 2026