CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
40.4%
Red Discord Bot Dashboard is an easy-to-use interactive web dashboard to control your Redbot. In Red Discord Bot before version 0.1.7a an RCE exploit has been discovered. This exploit allows Discord users with specially crafted Server names and Usernames/Nicknames to inject code into the webserver front-end code. By abusing this exploit, it’s possible to perform destructive actions and/or access sensitive information. This high severity exploit has been fixed on version 0.1.7a. There are no workarounds, bot owners must upgrade their relevant packages (Dashboard module and Dashboard webserver) in order to patch this issue.
Vendor | Product | Version | CPE |
---|---|---|---|
cogboard | red-dashboard | 0.1.2 | cpe:2.3:a:cogboard:red-dashboard:0.1.2:alpha0:*:*:*:*:*:* |
cogboard | red-dashboard | 0.1.3 | cpe:2.3:a:cogboard:red-dashboard:0.1.3:alpha0:*:*:*:*:*:* |
cogboard | red-dashboard | 0.1.4 | cpe:2.3:a:cogboard:red-dashboard:0.1.4:alpha0:*:*:*:*:*:* |
cogboard | red-dashboard | 0.1.5 | cpe:2.3:a:cogboard:red-dashboard:0.1.5:alpha0:*:*:*:*:*:* |
cogboard | red-dashboard | 0.1.6 | cpe:2.3:a:cogboard:red-dashboard:0.1.6:alpha0:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
40.4%