What is the CVSS score of CVE-2024-50705?

CVE-2024-50705 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Tripleplay are affected by CVE-2024-50705?

Organizations using Uniguest Tripleplay face moderate risk from CVE-2024-50705, a cross-site request forgery vulnerability rated CVSS 7.1.

How to fix or mitigate CVE-2024-50705?

Within 7 days: Identify all affected systems running Uniguest Tripleplay and apply vendor patches promptly. Verify anti-CSRF tokens and content security policies are enforced.

Tripleplay CVE-2024-50705

HIGH

Cross-Site Request Forgery (CSRF) (CWE-352)

2025-03-04 cve@mitre.org

CSRF XSS Tripleplay

7.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Adjacent

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 18:29 vuln.today

CVE Published

Mar 04, 2025 - 15:15 nvd

HIGH 7.1

DescriptionCVE.org

Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter.

AnalysisAI

Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter. Rated high severity (CVSS 7.1). No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. Unauthenticated reflected cross-site scripting (XSS) vulnerability in Uniguest Tripleplay before 24.2.1 allows remote attackers to execute arbitrary scripts via the page parameter. Affected products include: Uniguest Tripleplay. Version information: before 24.2.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.