Medium severity5.4NVD Advisory· Published Apr 19, 2023· Updated Jun 17, 2026

CVE-2023-25759

Description

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.

Affected products

Uniguest/Tripleplay
cpe:2.3:a:uniguest:tripleplay:3.4.0:*:*:*:*:*:*:*
Tripleplay Platform/Tripleplay Platformdescription
Tripleplay/Platformllm-fuzzy
Range: <Caveman 3.4.0

Patches

Vulnerability mechanics

References

tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25759-Summary.pdfnvdVendor Advisory
tripleplay.tvnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000