Skip to content
OpenAdvisories

Vendor

tgstation

5 known vulnerabilities.

Products

tgstation-server 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2023-34243

    Windows user name disclosure in TGstation

    TGstation is a toolset to manage production BYOND servers. In affected versions if a Windows user was registered in tgstation-server (TGS), an attacker could discover their username by brute-forcing the login endpoint with an invalid password. When a valid Wi…

    tgstation tgstation-server
  • Medium 6.1
    CVE-2023-33198

    Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API

    tgstation-server is a production scale tool for BYOND server management. The DreamMaker API (DMAPI) chat channel cache can possibly be poisoned by a tgstation-server (TGS) restart and reattach. This can result in sending chat messages to one of any of the con…

    tgstation tgstation-server