CVE-2022-31164

—

CVSS 3.1

7.5 high

EPSS

<1%p48

Published

Jul 22, 2022 (Jul 22, 2022)

Modified

Jun 17, 2026

Description

Tovy is a a staff management system for Roblox groups. A vulnerability in versions prior to 0.7.51 allows users to log in as other users, including privileged users such as the other of the instance. The problem has been patched in version 0.7.51.

Vendors: tovyblox
Products: tovy
Weakness: CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.