Red Discord Bot
Approved changes feed: RSS · Atom
cpe:2.3:a:cogboard:red_discord_bot:3.5.0:*:*:*:*:*:*:*
part: a version: 3.5.0 update: *
| Vendor | Cogboard (2445170a-baa1-50b4-a499-a57cba7f9f47) |
|---|---|
| Product | Red Discord Bot (e347f716-d333-54dd-b2f9-20e9053a6bb2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39905 |
vulnerable | 2026-06-08 06:41:51.810133 |
Red-DiscordBot vulnerable to Incorrect Authorization in commands API
MEDIUM (5.3)
Red is a fully modular Discord bot. Due to a bug in Red's Core API, 3rd-party cogs using the `@commands.can_manage_channel()` command permission check without additional permission controls may authorize a user to run a command even when that user doesn't have permissions to manage a channel. None of the core commands or core cogs are affected. The maintainers of the project are not aware of any _public_ 3rd-party cog utilizing this API at the time of writing this advisory. The problem was patched and released in version 3.5.10.
Published: 2024-07-11T15:43:34.437Z
Updated: 2024-08-02T04:33:11.321Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.