by Kastro
Paper/Archive/CVE-2025-23202

CVE-2025-23202

devycreates Bible-Module — Improper Input Validation in Bible Module for ROBLOX

EPSS 0.4%public exploitCVSS 10.0
critical.is priorityof 100
47
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 34.8.348 × 207.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Bible Module is a tool designed for ROBLOX developers to integrate Bible functionality into their games. The `FetchVerse` and `FetchPassage` functions in the Bible Module are susceptible to injection attacks due to the absence of input validation. This vulnerability could allow an attacker to manipulate the API request URLs, potentially leading to unauthorized access or data tampering. This issue has been addressed in version 0.0.3. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected

ProductAffectedFixed inSource
Bible-Module< 0.0.3–CNA

Scores by source

GitHub_M (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refgithub.com/devycreates/Bible-Module/security/advisories/GHSA-cm7w-99v2-prrqrefgithub.com/devycreates/Bible-Module/commit/5b783855fc3285be2da8639c97ac37af28f8c55a