CVE-2023-25760

—

CVSS 3.1

8.8 high

EPSS

<1%p45

Published

Apr 19, 2023 (Apr 19, 2023)

Modified

Jun 17, 2026

Description

Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload

Vendors: uniguest
Products: tripleplay
Weakness: CWE-522
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.