CVE-2022-31164

Published: Jul 22, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version 0.7.51.

Affected (1)

Products: Tovyblox: Tovy

Tovyblox

1 product

Tovy

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tovyblox Tovy	Before 0.7.51

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (4)

https://github.com/tovyblox/tovy/pull/63

Source: security-advisories@github.com

PatchThird Party Advisory

https://github.com/tovyblox/tovy/security/advisories/GHSA-j6f8-wh4v-jc37

Source: security-advisories@github.com

Third Party Advisory

https://github.com/tovyblox/tovy/pull/63

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/tovyblox/tovy/security/advisories/GHSA-j6f8-wh4v-jc37

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.