CVE-2024-31442

🗓️ 08 Apr 2024 15:33:19Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 47 Views🌐 WEB

Redon Hub Roblox Bot allows unauthorized access and admin command

Reporter	Title	Published	Views	Family All 8
CNNVD	Redon Hub 安全漏洞	8 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-31442 Redon-Hub has incorrect permissions on all admin related commands	8 Apr 202415:33	–	cvelist
EUVD	EUVD-2024-29331	3 Oct 202520:07	–	euvd
NVD	CVE-2024-31442	8 Apr 202416:15	–	nvd
OSV	CVE-2024-31442 Redon-Hub has incorrect permissions on all admin related commands	8 Apr 202415:33	–	osv
Positive Technologies	PT-2024-24079	8 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-31442	5 Feb 202500:26	–	redhatcve
Vulnrichment	CVE-2024-31442 Redon-Hub has incorrect permissions on all admin related commands	8 Apr 202415:33	–	vulnrichment

NVD

Vulners

Node

redon roblox_purchasing_hubRange<1.0.2

[
  {
    "vendor": "Redon-Tech",
    "product": "Redon-Hub",
    "versions": [
      {
        "version": "< 1.0.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Redon-Tech/Redon-Hub/security/advisories/GHSA-3rx8-6453-7q26
github	www.github.com/Redon-Tech/Redon-Hub/commit/38cb7c08d4d890e8a1badadbd46f459f06e3cdcd

Parameter	Position	Path	Description	CWE
command	path	/products admin clear	Privilege/Access control flaw allowing non-admin users to execute admin commands	CWE-276
user_role	path	/products admin clear	Privilege/Access control flaw allowing non-admin users to execute admin commands	CWE-276

17 Jun 2026 07:28Current

9High risk

Vulners AI Score9

CVSS 3.18.8

EPSS0.00545

SSVC

CWE-276