medium5.4
CVE-2023-25759
OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS le…
Impact
OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Uniguest | Tripleplay | Version 3.4.0 |