CVE-2022-31164 — HIGH (7.5)

Q: How severe is CVE-2022-31164?

CVE-2022-31164 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2022-31164?

Check the references section above for vendor advisories and patch information. Affected products include: Tovyblox Tovy.

Vulnerability Description

Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version 0.7.51.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Tovyblox	Tovy	< 0.7.51

Related Weaknesses (CWE)

CWE-287

References

https://github.com/tovyblox/tovy/pull/63PatchThird Party Advisory
https://github.com/tovyblox/tovy/security/advisories/GHSA-j6f8-wh4v-jc37Third Party Advisory
https://github.com/tovyblox/tovy/pull/63PatchThird Party Advisory
https://github.com/tovyblox/tovy/security/advisories/GHSA-j6f8-wh4v-jc37Third Party Advisory

FAQ

What is CVE-2022-31164?

CVE-2022-31164 is a vulnerability with a CVSS score of 7.5 (HIGH). Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. ...

How severe is CVE-2022-31164?

CVE-2022-31164 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-31164?

Check the references section above for vendor advisories and patch information. Affected products include: Tovyblox Tovy.