VULNERABILITY INTELLIGENCE

CVE-2023-25760

CVSS score8.8 HIGH

EPSS probability0.57%

CISA KEVNot currently listed

Published2023-04-19

Last modified2026-06-17

Description

Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload