Security Advisory
CVE-2023-26599
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link.