Описание
The Act module for Red Discord Bot before commit 6b9f3b86 is vulnerable to Remote Code Execution. With this exploit, Discord users can use specially crafted messages to perform destructive actions and/or access sensitive information. Unloading the Act module with unload act can render this exploit inaccessible.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.38 (исключая)
cpe:2.3:a:fluffycogs_project:fluffycogs:*:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00396
Низкий
8.7 High
CVSS3
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-502
EPSS
Процентиль: 60%
0.00396
Низкий
8.7 High
CVSS3
8.8 High
CVSS3
6.5 Medium
CVSS2
Дефекты
CWE-502