← Database

CVE-2023-25759

MEDIUM CVSS: 5.4 Published: 2023-04-19 Modified: 2026-06-17

Description

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.

Affected Platforms

Uniguest Tripleplay

Weakness Type

CWE-78, CWE-78

References