VYPR
← All advisories
High severity7.7NVD Advisory· Published May 29, 2023· Updated Jun 17, 2026

CVE-2023-32687

CVE-2023-32687

Description

tgstation-server is a toolset to manage production BYOND servers. Starting in version 4.7.0 and prior to 5.12.1, instance users with the list chat bots permission can read chat bot connections strings without the associated permission. This issue is patched in version 5.12.1. As a workaround, remove the list chat bots permission from users that should not have the ability to view connection strings. Invalidate any credentials previously stored for safety.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • tgstation/tgstation-serverllm-fuzzy2 versions
    4.7.0 <= version < 5.12.1+ 1 more
    • (no CPE)range: 4.7.0 <= version < 5.12.1
    • (no CPE)range: >= 4.7.0, < 5.12.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.