Lucene search
Veracode Vulnerability DatabaseVERACODE:26477HistoryAug 24, 2020 - 1:56 a.m.
Remote Code Execution (RCE)
2020-08-2401:56:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.001 Low
EPSS
Percentile
27.1%
red_discordbot is vulnerable to remote code execution (RCE). The vulnerability exists as through the variables member and **m_data made in an unnecessary format in trivia.py.
| CPE | Name | Operator | Version |
|---|---|---|---|
| red-discordbot | le | 3.3.10 | |
| red-discordbot | le | 3.3.10 |
References
github.com/Cog-Creators/Red-DiscordBot/commit/9ab536235bafc2b42c3c17d7ce26f1cc64482a81
github.com/Cog-Creators/Red-DiscordBot/pull/4175
github.com/Cog-Creators/Red-DiscordBot/pull/4175/commits/9ab536235bafc2b42c3c17d7ce26f1cc64482a81
github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-55j9-849x-26h4
Related
osv
osv
CVE-2020-15140
2020-08-21 17:15:13
Remote Code Execution in Red Discord Bot
2020-08-21 16:30:52
cve
cve
CVE-2020-15140
2020-08-21 17:15:13
cvelist
cvelist
CVE-2020-15140 Remote Code Execution in Red Discord Bot
2020-08-21 16:40:15
github
github
Remote Code Execution in Red Discord Bot
2020-08-21 16:30:52
prion
prion
Code injection
2020-08-21 17:15:00
nvd
nvd
CVE-2020-15140
2020-08-21 17:15:13