PT-2020-14315

Name of the Vulnerable Software and Affected Versions Sopel Channelmgnt plug-in versions prior to 1.0.3 MirahezeBot-Plugins versions 9.0.0 through 9.0.1 Description The issue allows malicious users to bypass access control lists ACLs and take over a channel by op/voicing. This is possible due to ...

CVE-2020-15251: Incorrect Authorization

In the Channelmgnt plug-in for Sopel a Python IRC bot before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less than 9.0.2 affected. Version 9.0.2...