CVE-2022-31164CWE-287

Tovy before v0.7.51 vulnerable to users logging in as and impersonating other users

High · published July 21, 2022

CVSS v3.1
7.5
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version 0.7.51.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00661 · 51.1th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-07-21T13:35Z
EPSS history
Timeline
  • 21 JUL 13:35Z
    Tovy before v0.7.51 vulnerable to users logging in as and impersonating other users
    cvelistv5