PT-2021-14503 · Unknown · Sopel-Channelmgnt

🗓️ 09 Apr 2021 00:00:00Reported by Positive TechnologiesType

Sopel-channelmgnt before 2.0.1 may bypass bot removal with multiuser kicks; cross-channel removal unproven.

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2021-21431	9 Apr 202100:00	–	attackerkb
CNNVD	sario528 sopel-channelmgnt 安全漏洞	9 Apr 202100:00	–	cnnvd
CVE	CVE-2021-21431	9 Apr 202115:45	–	cve
Cvelist	CVE-2021-21431 Improper Input Validation in sopel-plugins.channelmgnt	9 Apr 202115:45	–	cvelist
EUVD	EUVD-2021-0248	7 Oct 202500:30	–	euvd
Github Security Blog	Improper Input Validation in sopel-plugins.channelmgnt	9 Apr 202115:42	–	github
NVD	CVE-2021-21431	9 Apr 202116:15	–	nvd
OSV	GHSA-23C7-6444-399M Improper Input Validation in sopel-plugins.channelmgnt	9 Apr 202115:42	–	osv
OSV	PYSEC-2021-58	9 Apr 202116:15	–	osv
Prion	Command injection	9 Apr 202116:15	–	prion

Source	Link
github	www.github.com/MirahezeBots/sopel-channelmgnt/commit/7c96d400358221e59135f0a0be0744f3fad73856
osv	www.osv.dev/vulnerability/GHSA-23c7-6444-399m
osv	www.osv.dev/vulnerability/PYSEC-2021-58
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21431
osv	www.osv.dev/vulnerability/CVE-2021-21431
github	www.github.com/pypa/advisory-database/tree/main/vulns/sopel-plugins-channelmgnt/PYSEC-2021-58.yaml
github	www.github.com/MirahezeBots/sopel-channelmgnt/security/advisories/GHSA-23c7-6444-399m
github	www.github.com/MirahezeBots/sopel-channelmgnt/commit/643388365f28c5cc682254ab913c401f0e53260a
github	www.github.com/MirahezeBots/sopel-channelmgnt
t	www.t.me/cvenotify/14010

24 Oct 2022 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.6 - 8.1

CVSS 25.5

EPSS0.00271