Is CVE-2024-12925 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2024-12925 being exploited in the wild.

How severe is CVE-2024-12925?

High severity, with a CVSS score of 7.3, published 1 September 2025.

Which products and versions are affected?

Akınsoft QR Menü s1.05.05 to v1.05.12.

Is there a fix for CVE-2024-12925?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2024-12925 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2024-12925?

Check whether you run Akınsoft QR Menü at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2024-12925: Akınsoft QR Menü HTTP response splitting via certificate host mismatch

CVE-2024-12925 · Severity: high · CVSS 7.3 · Published 2025-09-01

Akınsoft QR Menü, a digital menu system used by restaurants and hospitality businesses, contains a security flaw in how it handles web communications. This vulnerability allows an attacker to manipulate the responses sent by the server to customers' browsers. If exploited, this could lead to the theft of user session information, the delivery of malicious content, or the redirection of customers to fraudulent websites.

Technologies: Akınsoft QR Menü. Vendors: Akınsoft.

Quick answers

Is CVE-2024-12925 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2024-12925 being exploited in the wild.
How severe is CVE-2024-12925?: High severity, with a CVSS score of 7.3, published 1 September 2025.
Which products and versions are affected?: Akınsoft QR Menü s1.05.05 to v1.05.12.
Is there a fix for CVE-2024-12925?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-12925 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2024-12925?: Check whether you run Akınsoft QR Menü at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

Akınsoft QR Menü versions s1.05.05 through v1.05.12 are vulnerable to HTTP Response Splitting. The root cause is an Improper Validation of Certificate with Host Mismatch (CWE-297), which allows an attacker to interfere with the application's HTTP response generation. By sending specially crafted requests, a remote, unauthenticated attacker can inject CRLF characters to split the HTTP response, potentially leading to Cross-Site Scripting (XSS), cache poisoning, or session hijacking. The vulnerability is exploitable over the network without user interaction. Users are advised to upgrade to version v1.05.12 or later.

Affected products

Akınsoft QR Menü s1.05.05 to v1.05.12

Timeline

2025-09-01: advisory: Initial publication of CVE-2024-12925 by TR-CERT/USOM.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.