TI-2025-15571 CVE-2025-21611
tgstation-server's role authorization incorrectly OR'd with user's enabled status
Priority MEDIUM 41
tgstation-server is a production scale tool for BYOND server management.
Vulnerabilities
7 records
TI-2024-27844 CVE-2024-41799 · GHSA-c3h4-9gc2-f7h4
Path traversal in tgstation-server
Priority MEDIUM 45
tgstation-server is a production scale tool for BYOND server management.
TI-2023-17079 CVE-2023-34243
Windows user name disclosure in TGstation
Priority LOW 32
TGstation is a toolset to manage production BYOND servers.
TI-2023-16375 CVE-2023-33198
Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API
Priority LOW 34
tgstation-server is a production scale tool for BYOND server management.
Priority LOW 35
tgstation-server is a toolset to manage production BYOND servers.
TI-2020-12691 CVE-2020-16136
In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download…
Priority LOW 38
In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal ../ sequence…
TI-2018-12228 CVE-2018-17107 · GHSA-42r6-p4px-qvv6
In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins…
Priority MEDIUM 45
In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.