Approved changes feed: RSS · Atom

cpe:2.3:a:ree6:ree6:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRee6 (2632dc7a-b732-5f64-bf3a-48d6cfb3294b)
ProductRee6 (4e166b11-e8de-523a-8b9e-aadd8f9e0d57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/ree6-applications/ree6 purl2cpe 2026-06-01 10:17:43.515330

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-39303 vulnerable 2026-06-08 05:47:18.571055 Ree6 vulnerable to SQL Injection
HIGH (8.1)
Ree6 is a moderation bot. This vulnerability allows manipulation of SQL queries. This issue has been patched in version 1.7.0 by using Javas PreparedStatements, which allow object setting without the risk of SQL injection. There are currently no known workarounds.
Published: 2022-10-13T00:00:00.000Z
Updated: 2025-04-23T16:50:08.452Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-39302 vulnerable 2026-06-08 05:47:18.570646 Ree6 may bypass webhook protection
MEDIUM (5.5)
Ree6 is a moderation bot. This vulnerability would allow other server owners to create configurations such as "Better-Audit-Logging" which contain a channel from another server as a target. This would mean you could send log messages to another Guild channel and bypass raid and webhook protections. A specifically crafted log message could allow spamming and mass advertisements. This issue has been patched in version 1.9.9. There are currently no known workarounds.
Published: 2022-10-13T00:00:00.000Z
Updated: 2025-04-23T16:50:15.079Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.