Approved changes feed: RSS · Atom

cpe:2.3:a:megacord:megabot:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMegacord (d1638aba-4172-5cd3-9cac-6944bba54ad1)
ProductMegabot (716cb1cc-bc63-566d-adb5-104effb6d9b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-43404 vulnerable 2026-06-08 06:45:50.693622 Remote Code Execution Vulnerability in MEGABOT
CRITICAL (9.8)
MEGABOT is a fully customized Discord bot for learning and fun. The `/math` command and functionality of MEGABOT versions < 1.5.0 contains a remote code execution vulnerability due to a Python `eval()`. The vulnerability allows an attacker to inject Python code into the `expression` parameter when using `/math` in any Discord channel. This vulnerability impacts any discord guild utilizing MEGABOT. This vulnerability was fixed in release version 1.5.0.
Published: 2024-08-20T14:55:12.928Z
Updated: 2024-08-20T20:29:22.818Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.