Approved changes feed: RSS · Atom
cpe:2.3:a:duck-organization:quest-bot:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Duck Organization (2e74bddb-8d56-5340-9083-f9e710d816bb) |
|---|---|
| Product | Quest Bot (9177a1c3-c800-57de-b7bf-87fe1f1c9b16) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-47189 |
vulnerable | 2026-07-29 00:54:59.896480 |
Quest Bot: AutoMod removal can delete rules from another guild by global rule ID
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the AutoMod remove flow looks up and deletes rules by global database ID without verifying that the rule belongs to the guild where the command is executed. A user can learn a victim guild’s AutoMod rule ID through autocomplete, then remove that rule from another guild where they have Manage Server. This issue has been patched in version 1.0.5.
Published: 2026-06-11T18:31:24.753Z
Updated: 2026-06-11T19:02:22.869Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47188 |
vulnerable | 2026-07-29 00:54:59.896163 |
Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions.
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.5, the latest release suppresses mentions in several moderation commands, but /unban and /unwarn still echo user-controlled reason text in public bot messages without allowedMentions. A moderator can use @everyone or @here in the reason and make the bot send a mass ping. This issue has been patched in version 1.0.5.
Published: 2026-06-11T18:30:49.463Z
Updated: 2026-06-13T02:32:09.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47177 |
vulnerable | 2026-07-29 00:54:59.886870 |
Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility channel
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can set the ticket transcript channel to a channel they can read. When tickets are closed, the bot exports the full ticket history and sends it to that configured transcript channel. This can expose private ticket messages to users who could not read the original ticket channel. This issue has been patched in version 1.0.4.
Published: 2026-06-11T18:30:25.285Z
Updated: 2026-06-11T19:36:40.044Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47176 |
vulnerable | 2026-07-29 00:54:59.886701 |
Quest Bot: Logging module can disclose private-channel message contents to a lower-visibility log channel
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can enable logging and choose a logging channel they can read. The bot then logs deleted and edited message contents from every channel it can see, including private channels the configuring user cannot access. This issue has been patched in version 1.0.4.
Published: 2026-06-11T18:29:55.933Z
Updated: 2026-06-11T19:01:18.109Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47175 |
vulnerable | 2026-07-29 00:54:59.886502 |
Quest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` pings
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, several moderation commands echo user-controlled reason text in public bot replies without disabling mention parsing. A moderator who does not have permission to mention everyone can still make the bot send @everyone or @here if the bot has that permission. This issue has been patched in version 1.0.4.
Published: 2026-06-11T18:29:43.264Z
Updated: 2026-06-13T02:29:58.367Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47173 |
vulnerable | 2026-07-29 00:54:59.884124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47172 |
vulnerable | 2026-07-29 00:54:59.883938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47171 |
vulnerable | 2026-07-29 00:54:59.883617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47169 |
vulnerable | 2026-07-29 00:54:59.880227 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-47163 |
vulnerable | 2026-07-29 00:54:59.879025 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.