PT-2021-18234
CVE-2021-29466
·
تاريخ النشر
2021-04-22
·
تاريخ التحديث
2021-04-27
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Discord-Recon versions 0.0.3 and prior
Description:
Discord-Recon is a bot for the Discord chat service. A remote attacker can read local files from the server, disclosing important information.
Recommendations:
For versions 0.0.3 and prior, as a temporary workaround, a bot maintainer can locate the file
app.py and add .replace('..','') into the Path variable inside of the recon function.
Update to version 0.0.4 to resolve the issue. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾