Authorization Bypass

2022-08-1905:26:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

authorization bypass

vulnerability

interactions

client

unauthorized actions

software

EPSS

0.001

Percentile

32.8%

JSON

py_cord is vulnerable to authorization bypass. The vulnerability exists in _from_data function in interactions.py because interaction data is processed on a client without the bot scope is not properly handled which allows an attacker to access the running servers and perform unauthorized actions.