Open Redirect in HotelRunner’s B2B

CVE Details

Basic Information

Title Open Redirect in HotelRunner’s B2B
Type cve
Published 2025-07-23T11:21:57.898Z
Modified 2025-07-23T11:21:57.898Z

Product Information

Vendor HotelRunner
Product B2B
Version 0

CVSS Information

Base Score 4.7 (MEDIUM)
Attack Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Affected Products

  • HotelRunner B2B 0

Additional Information

CWE List CWE-601
Source TR-CERT

Description

URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in HotelRunner B2B allows Forceful Browsing.This issue affects B2B: before 04.06.2025.

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.