CVE-2020-26249

🗓️ 08 Dec 2020 23:55:14Reported by GitHub_MType

Red Discord Bot Dashboard RCE exploit in versions prior to 0.1.7a allows code injection and sensitive data access

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2020-26249	9 Dec 202007:35	–	circl
CNNVD	Red Discord Bot Cross-Site Scripting Vulnerability	8 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-26249 Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability	8 Dec 202023:55	–	cvelist
EUVD	EUVD-2020-0162	7 Oct 202500:30	–	euvd
Github Security Blog	Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability	8 Dec 202023:55	–	github
NVD	CVE-2020-26249	9 Dec 202000:15	–	nvd
OSV	GHSA-HM45-MGQM-GJM4 Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability	8 Dec 202023:55	–	osv
OSV	PYSEC-2020-98	9 Dec 202000:15	–	osv
Prion	Design/Logic Flaw	9 Dec 202000:15	–	prion
PyPA	PYSEC-2020-98	9 Dec 202000:15	–	pypa

NVD

Vulners

Node

cogboard red-dashboardMatch0.1.2alpha0

cogboard red-dashboardMatch0.1.3alpha0

cogboard red-dashboardMatch0.1.4alpha0

cogboard red-dashboardMatch0.1.5alpha0

cogboard red-dashboardMatch0.1.6alpha0

[
  {
    "product": "Red-Dashboard",
    "vendor": "Cog-Creators",
    "versions": [
      {
        "status": "affected",
        "version": "< 0.1.7a"
      }
    ]
  }
]

Source	Link
github	www.github.com/Cog-Creators/Red-Dashboard/security/advisories/GHSA-hm45-mgqm-gjm4
github	www.github.com/Cog-Creators/Red-Dashboard/commit/99d88b840674674166ce005b784ae8e31e955ab1
pypi	www.pypi.org/project/Red-Dashboard
github	www.github.com/Cog-Creators/Red-Dashboard/commit/a6b9785338003ec87fb75305e7d1cc2d40c7ab91

21 Nov 2024 05:19Current

8High risk

Vulners AI Score8

CVSS 23.5

CVSS 3.17.7 - 8.7

EPSS0.00414

CWE-79