Injection Attack Vulnerability in Bible Module for ROBLOX Developers

CVE-2025-23202

What is CVE-2025-23202?

The Bible Module, utilized to enrich ROBLOX games with Bible functionality, contains a vulnerability within the FetchVerse and FetchPassage functions, which are prone to injection attacks. This issue stems from inadequate input validation, allowing malicious actors to manipulate API request URLs. Such exploitation could lead to unauthorized data access or tampering, significantly compromising the security of affected applications. Users are highly encouraged to upgrade to version 0.0.3 or later to mitigate the risk, as there are currently no known workarounds for this vulnerability.

References