CVE-2025-23202CWE-20

Improper Input Validation in Bible Module for ROBLOX

Critical · published January 17, 2025

CVSS v4.0
10.0
EPSS
0%
Percentile
31.8
In the wild
Unconfirmed
What it is

Bible Module is a tool designed for ROBLOX developers to integrate Bible functionality into their games. The `FetchVerse` and `FetchPassage` functions in the Bible Module are susceptible to injection attacks due to the absence of input validation. This vulnerability could allow an attacker to manipulate the API request URLs, potentially leading to unauthorized access or data tampering. This issue has been addressed in version 0.0.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00389 · 31.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-01-17T20:18Z
EPSS history
Timeline
  • 17 JAN 20:18Z
    Improper Input Validation in Bible Module for ROBLOX
    cvelistv5