Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-32687
HistoryMay 29, 2023 - 9:15 p.m.

Code injection

2023-05-2921:15:00
PRIOn knowledge base
www.prio-n.com
4
code injection
tgstation-server
unauthorized access
security patch
chat bot connections

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

tgstation-server is a toolset to manage production BYOND servers. Starting in version 4.7.0 and prior to 5.12.1, instance users with the list chat bots permission can read chat bot connections strings without the associated permission. This issue is patched in version 5.12.1. As a workaround, remove the list chat bots permission from users that should not have the ability to view connection strings. Invalidate any credentials previously stored for safety.

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

Related for PRION:CVE-2023-32687