Security Advisory

CVE-2023-25759

5.4
MEDIUM

Vulnerability Description

OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.
Published Date April 19, 2023
Official Source NIST NVD Advisory