CRITICAL 9.8 NuGet
Duplicate Advisory: tgstation-server vulnerable to cached user logins in legacy server
GHSA-7r36-jf3c-jhp4
Published ยท Modified
Description
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-42r6-p4px-qvv6. This link is maintained to preserve external references.
Original Description
In Tgstation tgstation-server 3.2.4.0 through 3.2.1.0 (fixed in 3.2.5.0), active logins would be cached, allowing subsequent logins to succeed with any username or password.
Ready to move
Start Securing
Free, no credit card | First findings in minutes