Lucene search

GitHub_MCVELIST:CVE-2021-21433

HistoryApr 09, 2021 - 5:55 p.m.

CVE-2021-21433 Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation

2021-04-0917:55:18

CWE-94

GitHub_M

www.cve.org

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

9.9 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.

CNA Affected

[
  {
    "product": "Discord-Recon",
    "vendor": "DEMON1A",
    "versions": [
      {
        "status": "affected",
        "version": "<= 0.0.1"
      }
    ]
  }
]

References

github.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50

github.com/DEMON1A/Discord-Recon/issues/6

github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x

9.9 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

9.9 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

81.0%

JSON

Related for CVELIST:CVE-2021-21433