PT-2025-4844 · Roblox · Roblox

Brinz14 · Published 2025-01-17 · Updated 2025-01-17 · CVE-2025-23202

Positive Technologies (AI Summary)

CVSS v4.0

10

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Bible Module versions prior to 0.0.3

Description The Bible Module, a tool for ROBLOX developers, has a susceptibility to injection attacks due to the lack of input validation in the FetchVerse and FetchPassage functions. This could allow an attacker to manipulate API request URLs, potentially leading to unauthorized access or data tampering.

Recommendations For versions prior to 0.0.3, update to version 0.0.3 to address the issue. As a temporary workaround, consider disabling the FetchVerse and FetchPassage functions until the update is applied. Restrict access to the Bible Module to minimize the risk of exploitation. Avoid using the vulnerable functions in the affected API endpoints until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-23202

GHSA-CM7W-99V2-PRRQ

Affected Products

Roblox

References · 7

• https://osv.dev/vulnerability/CVE-2025-23202 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23202 · Security Note
• https://github.com/devycreates/Bible-Module/security/advisories/GHSA-cm7w-99v2-prrq · Note
• https://github.com/devycreates/Bible-Module/commit/5b783855fc3285be2da8639c97ac37af28f8c55a · Note
• https://twitter.com/CVEnew/status/1880384713371566578 · Twitter Post
• https://twitter.com/CveFindCom/status/1880352482640933344 · Twitter Post
• https://t.me/cvedetector/15742 · Telegram Post