Lucene search
K

CVE-2021-26918

🗓️ 09 Feb 2021 02:07:20Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 171 Views🌐 WEB

The ProBot bot for Discord through 2021-02-08 allows interference with the "Send an image when a user joins the server" feature due to the uploader web service's allowance of double extensions (e.g., .html.jpg) with the text/html content type

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2021-26918
30 May 202103:00
circl
CNNVD
Discord ProBot Code Issue Vulnerability
9 Feb 202100:00
cnnvd
Check Point Advisories
Web Servers Suspicious File Upload (CVE-2019-16113; CVE-2021-26918; CVE-2022-26645)
16 Nov 201400:00
checkpoint_advisories
Check Point Advisories
Probot Bot Type Confusion (CVE-2021-26918)
24 Mar 202100:00
checkpoint_advisories
Cvelist
CVE-2021-26918
9 Feb 202102:07
cvelist
NVD
CVE-2021-26918
9 Feb 202103:15
nvd
Packet Storm
Discord Probot Arbitrary File Upload
9 Feb 202100:00
packetstorm
Prion
Code injection
9 Feb 202103:15
prion
Positive Technologies
PT-2021-17175 · Discord · Probot
9 Feb 202100:00
ptsecurity
RedhatCVE
CVE-2021-26918
22 May 202520:40
redhatcve
Rows per page
NVD
Vulnrichment
Node
probotbotRange2021-02-08discord
ParameterPositionPathDescriptionCWE
filerequest bodyuploader.probot.io/Unrestricted file upload via multipart/form-data allowing crafted filenames with multiple extensions to bypass mime-type checksCWE-434

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:57Current
9.7High risk
Vulners AI Score9.7
CVSS 27.5
CVSS 3.19.8
EPSS0.00782
SSVC
171