CVE-2023-32687: 
TG Station Server vulnerability analysis and mitigation

CVE-2023-32687 affects tgstation-server, a toolset for managing production BYOND servers. The vulnerability was discovered in versions 4.7.0 through 5.12.1, allowing instance users with list chat bots permission to read chat bot connection strings without proper authorization. The issue was disclosed and patched in version 5.12.1 (GitHub Advisory).

The vulnerability is classified as CWE-522 (Insufficiently Protected Credentials). It received a CVSS v3.1 base score of 7.7 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, indicating network attack vector, low attack complexity, low privileges required, no user interaction needed, changed scope, and high impact on confidentiality (GitHub Advisory).

The vulnerability allows unauthorized access to chat bot connection strings, potentially exposing sensitive credentials and connection information to users who should not have access to this data (GitHub Advisory).

The vulnerability can be exploited by users who have the list chat bots permission, allowing them to read chat bot connection strings without having the proper authorization for viewing these credentials (GitHub Advisory).

The vulnerability has been patched in version 5.12.1. For affected versions, users should remove the list chat bots permission from users who should not have access to view connection strings. It is also recommended to invalidate any previously stored credentials as a safety measure (GitHub Advisory, Release Notes).