CVE-2023-33198 : tgstation-server is a production scale tool for BYOND server management. The Dre

tgstation-server is a production scale tool for BYOND server management. The DreamMaker API (DMAPI) chat channel cache can possibly be poisoned by a tgstation-server (TGS) restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the instance on enabled chat bots. This lasts until the instance's chat channels are updated in TGS or DreamDaemon is restarted. TGS chat commands are unaffected, custom or otherwise.

Published 2023-05-30 05:15:12

Updated 2023-06-05 16:45:14

Source GitHub, Inc.

View at NVD, CVE.org

Products affected by CVE-2023-33198

Tgstation13 » Tgstation-server
Versions from including (>=) 4.0.0 and before (<) 5.12.2
cpe:2.3:a:tgstation13:tgstation-server:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2023-33198

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 50 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-33198

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
6.1	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N	1.6	4.0	GitHub, Inc.
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: Required Scope: Changed Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2023-33198

CWE-941 Incorrectly Specified Destination in a Communication Channel

The product creates a communication channel to initiate an outgoing request to an actor, but it does not correctly specify the intended destination for that actor.

Assigned by: security-advisories@github.com (Secondary)

References for CVE-2023-33198

https://github.com/tgstation/tgstation-server/security/advisories/GHSA-p2xj-w57r-6f5m

Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API · Advisory · tgstation/tgstation-server · GitHub
Patch;Vendor Advisory
https://github.com/tgstation/tgstation-server/releases/tag/tgstation-server-v5.12.2

Release tgstation-server-v5.12.2 · tgstation/tgstation-server · GitHub
Release Notes
https://github.com/tgstation/tgstation-server/pull/1493

Fix potentially sending DMAPI messages to the wrong channels after a TGS restart by Cyberboss · Pull Request #1493 · tgstation/tgstation-server · GitHub
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2023-33198

Products affected by CVE-2023-33198

Exploit prediction scoring system (EPSS) score for CVE-2023-33198

CVSS scores for CVE-2023-33198

CWE ids for CVE-2023-33198

References for CVE-2023-33198