Lucene search
+L

CVE-2021-26918

🗓️ 09 Feb 2021 02:07:20Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 186 Views

The ProBot bot for Discord through 2021-02-08 allows interference with the "Send an image when a user joins the server" feature due to the uploader web service's allowance of double extensions (e.g., .html.jpg) with the text/html content type

Related
Detection
Refs
Social
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2021-26918
9 Feb 202103:15
attackerkb
circl
Circl
CVE-2021-26918
30 May 202103:00
circl
cnnvd
CNNVD
Discord ProBot Code Issue Vulnerability
9 Feb 202100:00
cnnvd
checkpoint_advisories
Check Point Advisories
Web Servers Suspicious File Upload (CVE-2019-16113; CVE-2021-26918; CVE-2022-26645)
16 Nov 201400:00
checkpoint_advisories
checkpoint_advisories
Check Point Advisories
Probot Bot Type Confusion (CVE-2021-26918)
24 Mar 202100:00
checkpoint_advisories
cvelist
Cvelist
CVE-2021-26918
9 Feb 202102:07
cvelist
nvd
NVD
CVE-2021-26918
9 Feb 202103:15
nvd
osv
OSV
CVE-2021-26918
9 Feb 202103:15
osv
packetstorm
Packet Storm
Discord Probot Arbitrary File Upload
9 Feb 202100:00
packetstorm
prion
Prion
Code injection
9 Feb 202103:15
prion
Rows per page
NVD
Vulnrichment
Node
probotbotRange2021-02-08discord

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:44Current
9.7High risk
Vulners AI Score9.7
CVSS 27.5
CVSS 3.19.8
EPSS0.02585
SSVC
186