Tgstation13
Tgstation13 Tgstation-server: vulnerabilidades y CVE
Tgstation13 Tgstation-server tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-21611 | Alta (8.8) | 0.47% | — | 6 ene 2025 | tgstation-server is a production scale tool for BYOND server management. Prior to 6.12.3, roles used to authorize API methods were incorrectly OR'd instead of AND'ed with the role used to determine if a user was… |
| CVE-2024-41799 | Crítica (9.9) | 1.2% | — | 29 jul 2024 | tgstation-server is a production scale tool for BYOND server management. Prior to 6.8.0, low permission users using the "Set .dme Path" privilege could potentially set malicious .dme files existing on the host machine… |
| CVE-2023-34243 | Media (5.3) | 0.46% | — | 8 jun 2023 | TGstation is a toolset to manage production BYOND servers. In affected versions if a Windows user was registered in tgstation-server (TGS), an attacker could discover their username by brute-forcing the login endpoint… |
| CVE-2023-33198 | Alta (7.5) | 0.64% | — | 30 may 2023 | tgstation-server is a production scale tool for BYOND server management. The DreamMaker API (DMAPI) chat channel cache can possibly be poisoned by a tgstation-server (TGS) restart and reattach. This can result in… |
| CVE-2023-32687 | Media (6.5) | 0.63% | — | 29 may 2023 | tgstation-server is a toolset to manage production BYOND servers. Starting in version 4.7.0 and prior to 5.12.1, instance users with the list chat bots permission can read chat bot connections strings without the… |
| CVE-2020-16136 | Alta (7.7) | 2.1% | — | 31 jul 2020 | In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../… |
| CVE-2018-17107 | Crítica (9.8) | 1.6% | — | 24 sept 2018 | In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password. |