CVE-2023-25760 Information

Description

Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload

Reference

https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25760-Summary.pdf https://tripleplay.tv