CVE-2024-30129

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

The HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would cause the request to be sent to a completely different domain/IP address.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-644

Affected software

No affected versions have been published.

Timeline

Published: Dec 6, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-30138.8A flaw has been found in Teledyne FLIR AX8 up to 1.46.16. The impacted element is an unknown function of the file /tools/test_login.php?acti CVE-2024-301307.5HCL Nomad server on Domino is vulnerable to the cache containing sensitive information which could potentially give an attacker the ability CVE-2024-301327.5HCL Nomad server on Domino did not configure certain HTTP Security headers by default which could allow an attacker to obtain sensitive info CVE-2024-301335.3HCL Traveler for Microsoft Outlook (HTMO) is susceptible to a control flow vulnerability. The application does not sufficiently manage its CVE-2024-301347.5The HCL Traveler for Microsoft Outlook executable (HTMO.exe) is being flagged as potentially Malicious Software or an Unrecognized Applicati CVE-2024-301357.5HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken.CVE-2024-30148.8A vulnerability classified as critical has been found in SourceCodester Simple Subscription Website 1.0. Affected is an unknown function of CVE-2024-301405.4HCL BigFix Compliance is affected by unvalidated redirects and forwards. The HOST header can be manipulated by an attacker and as a result,CVE-2024-301414.7HCL BigFix Compliance is vulnerable to the generation of error messages containing sensitive information. Detailed error messages can provi CVE-2024-301423.8HCL BigFix Compliance is affected by a missing secure flag on a cookie. If a secure flag is not set, cookies may be stolen by an attacker u CVE-2024-301434.3HCL AppScan Traffic Recorder fails to adequately neutralize special characters within the filename, potentially allowing it to resolve to a CVE-2024-301456.1Multiple vectors in HCL Domino Volt and Domino Leap allow client-side script injection in the authoring environment and deployed application