CVE-2023-33198: Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API
tgstation-server is a production scale tool for BYOND server management. The DreamMaker API (DMAPI) chat channel cache can possibly be poisoned by a tgstation-server (TGS) restart and reattach. This can result in sending chat messages to one of any of the configured IRC or Discord channels for the instance on enabled chat bots. This lasts until the instance's chat channels are updated in TGS or DreamDaemon is restarted. TGS chat commands are unaffected, custom or otherwise.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure that tgstation-server (TGS) restart/re-attach does not cause DreamMaker API (DMAPI) chat channel cache poisoning; treat DMAPI chat cache during TGS restart as potentially attacker-influenced.
- Operational
After a tgstation-server (TGS) restart/reattach event, update the instance's chat channels in tgstation-server (TGS) or restart DreamDaemon to clear/refresh the DMAPI chat channel cache.
Event History
Frequently Asked Questions
What is CVE-2023-33198?
CVE-2023-33198 is a vulnerability in tgstation-server that allows the DreamMaker API (DMAPI) chat channel cache to be poisoned, potentially resulting in sending chat messages to unintended channels.
What is the severity of CVE-2023-33198?
CVE-2023-33198 has a severity rating of 7.5 (high).
How does CVE-2023-33198 affect tgstation-server?
CVE-2023-33198 affects tgstation-server versions between 4.0.0 and 5.12.2.
How can I fix CVE-2023-33198?
To fix CVE-2023-33198, you should update tgstation-server to version 5.12.2 or later.
Where can I find more information about CVE-2023-33198?
You can find more information about CVE-2023-33198 in the following references: - [GitHub Security Advisory](https://github.com/tgstation/tgstation-server/security/advisories/GHSA-p2xj-w57r-6f5m) - [GitHub Pull Request](https://github.com/tgstation/tgstation-server/pull/1493) - [tgstation-server Release](https://github.com/tgstation/tgstation-server/releases/tag/tgstation-server-v5.12.2)