← Database

CVE-2024-50707

CRITICAL CVSS: 10.0 Published: 2025-03-04 Modified: 2026-06-17

Description

Unauthenticated remote code execution vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary code via the X-Forwarded-For header in an HTTP GET request.

Affected Platforms

Uniguest Tripleplay

Weakness Type

CWE-94

References