PT-2021-21816
CVE-2021-37696
·
Published
2021-08-11
·
Updated
2021-08-20
Description by
CVSS 3.1
7.1
HighMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Name of the Vulnerable Software and Affected Versions
tmerc-cogs versions prior to commit 92325be650a6c17940cc52611797533ed95dbbe1
Description
A vulnerability has been found in the tmerc-cogs code for the Red Discord bot, allowing any user to access sensitive information by crafting a specific MassDM message.
Recommendations
For versions prior to commit 92325be650a6c17940cc52611797533ed95dbbe1, update to the current commit to resolve the issue.
As a temporary workaround, consider unloading the MassDM cog or globally disabling the
[p]massdm command until the update is applied. Found an issue in the description? Have something to add? Feel free to write us 👾