Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 3:41 a.m.4 views

CVE-2024-45307

SudoBot, a Discord moderation bot, is vulnerable to privilege escalation and exploit of the -config command in versions prior to 9.26.7. Anyone is theoretically able to update any configuration of the bot and potentially gain control over the bot's settings. Every version of v9 before v9.26.7 is...

9.8CVSS7.7AI score0.00527EPSS
Exploits0References1
NVD
NVD
added 2024/09/03 7:15 p.m.13 views

CVE-2024-45307

SudoBot, a Discord moderation bot, is vulnerable to privilege escalation and exploit of the -config command in versions prior to 9.26.7. Anyone is theoretically able to update any configuration of the bot and potentially gain control over the bot's settings. Every version of v9 before v9.26.7 is...

9.8CVSS0.00527EPSS
Exploits0References2
CVE
CVE
added 2024/09/03 7:1 p.m.49 views

CVE-2024-45307

SudoBot (Discord moderation bot) contains a privilege escalation flaw in the -config command due to missing authorization checks. Any user could update bot configurations and potentially take control of settings on affected installations. Affected versions are all v9 before 9.26.7; v8 and newer 9...

9.8CVSS9.5AI score0.00527EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/03 7:1 p.m.8 views

CVE-2024-45307 SudoBot missing authorization check in `-config` command

SudoBot, a Discord moderation bot, is vulnerable to privilege escalation and exploit of the -config command in versions prior to 9.26.7. Anyone is theoretically able to update any configuration of the bot and potentially gain control over the bot's settings. Every version of v9 before v9.26.7 is...

8.8CVSS8AI score0.00527EPSS
Exploits0References2
OSV
OSV
added 2024/09/03 7:1 p.m.9 views

CVE-2024-45307 SudoBot missing authorization check in `-config` command

SudoBot, a Discord moderation bot, is vulnerable to privilege escalation and exploit of the -config command in versions prior to 9.26.7. Anyone is theoretically able to update any configuration of the bot and potentially gain control over the bot's settings. Every version of v9 before v9.26.7 is...

8.8CVSS7.7AI score0.00527EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/09/03 7:1 p.m.12 views

CVE-2024-45307 SudoBot missing authorization check in `-config` command

SudoBot, a Discord moderation bot, is vulnerable to privilege escalation and exploit of the -config command in versions prior to 9.26.7. Anyone is theoretically able to update any configuration of the bot and potentially gain control over the bot's settings. Every version of v9 before v9.26.7 is...

8.8CVSS0.00527EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/03 12:0 a.m.1 views

SudoBot 安全漏洞

SudoBot is an open source Discord audit bot from OneSoftNet. A security vulnerability exists in versions of SudoBot prior to 9.26.7 that stems from improper privilege control of the -config command, which could allow an unauthorized user to update any of the robot's configurations and gain contro...

9.8CVSS6.8AI score0.00527EPSS
Exploits0References3
Rows per page
Query Builder