Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/07/11 5:32 p.m.40 views

Red-DiscordBot vulnerable to Incorrect Authorization in commands API

Impact Due to a bug in Red's Core API, 3rd-party cogs using the @commands.canmanagechannel command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of the core commands or core cogs...

5.3CVSS7.3AI score0.0041EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder