TI-2024-27844 CVE-2024-41799 · GHSA-c3h4-9gc2-f7h4
Path traversal in tgstation-server
Priority MEDIUM 45
tgstation-server is a production scale tool for BYOND server management.
tgstation
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
tgstation records in CISA KEVNo tgstation vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2018-12228 CVE-2018-17107 · GHSA-42r6-p4px-qvv6
In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins…
Priority MEDIUM 45
In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.
TI-2025-15571 CVE-2025-21611
tgstation-server's role authorization incorrectly OR'd with user's enabled status
Priority MEDIUM 41
tgstation-server is a production scale tool for BYOND server management.
TI-2020-12691 CVE-2020-16136
In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download…
Priority LOW 38
In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequence…
Priority LOW 35
tgstation-server is a toolset to manage production BYOND servers.
TI-2023-16375 CVE-2023-33198
Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API
Priority LOW 34
tgstation-server is a production scale tool for BYOND server management.
TI-2023-17079 CVE-2023-34243
Windows user name disclosure in TGstation
Priority LOW 32
TGstation is a toolset to manage production BYOND servers.