Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 30/05/2023 Updated: 05/06/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

tgstation-server is a production scale tool for BYOND server management. The DreamMaker API (DMAPI) chat channel cache can possibly be poisoned by a tgstation-server (TGS) restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the instance on enabled chat bots. This lasts until the instance's chat channels are updated in TGS or DreamDaemon is restarted. TGS chat commands are unaffected, custom or otherwise.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tgstation13 tgstation-server

NVD-CWE-Other https://github.com/tgstation/tgstation-server/security/advisories/GHSA-p2xj-w57r-6f5m https://github.com/tgstation/tgstation-server/pull/1493 https://github.com/tgstation/tgstation-server/releases/tag/tgstation-server-v5.12.2 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-33198

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect