PT-2020-14245

CVE-2020-15172

·

Published

2020-09-15

·

Updated

2020-10-08

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Red Discord Bot Act module versions prior to commit 6b9f3b86
Description The issue allows Discord users to send specially crafted messages, potentially leading to destructive actions and unauthorized access to sensitive information. This is due to a Remote Code Execution flaw.
Recommendations For versions prior to commit 6b9f3b86, as a temporary workaround, consider unloading the Act module with unload act until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-RM7M-J4XP-RV2P
Found an issue in the description? Have something to add? Feel free to write us 👾