VULNERABILITY INTELLIGENCE
CVE-2024-30129
CVSS score5.3 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2024-12-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.
Weakness classification
- psirt@hcl.com: CWE-644