Lucene search

K

Uniguest Security Vulnerabilities

cve
cve

CVE-2023-26599

XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted...

6.1CVSS

5.8AI Score

0.001EPSS

2023-04-19 12:15 PM
20
cve
cve

CVE-2023-25759

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request...

5.4CVSS

5.7AI Score

0.001EPSS

2023-04-19 12:15 PM
20
cve
cve

CVE-2023-25760

Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request...

8.8CVSS

8.2AI Score

0.001EPSS

2023-04-19 12:15 PM
17