← Database

CVE-2023-25760

HIGH CVSS: 8.8 Published: 2023-04-19 Modified: 2026-06-17

Description

Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload

Affected Platforms

Uniguest Tripleplay

Weakness Type

CWE-522, CWE-522

References