PT-2025-4844

CVE-2025-23202

·

Published

2025-01-17

·

Updated

2025-01-17

Description by

CVSS 4.0
10
Critical
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Name of the Vulnerable Software and Affected Versions Bible Module versions prior to 0.0.3
Description The Bible Module, a tool for ROBLOX developers, has a susceptibility to injection attacks due to the lack of input validation in the FetchVerse and FetchPassage functions. This could allow an attacker to manipulate API request URLs, potentially leading to unauthorized access or data tampering.
Recommendations For versions prior to 0.0.3, update to version 0.0.3 to address the issue. As a temporary workaround, consider disabling the FetchVerse and FetchPassage functions until the update is applied. Restrict access to the Bible Module to minimize the risk of exploitation. Avoid using the vulnerable functions in the affected API endpoints until the issue is resolved.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-CM7W-99V2-PRRQ
Found an issue in the description? Have something to add? Feel free to write us 👾