Lucene search
GoogleOSV:CVE-2021-29466HistoryApr 22, 2021 - 1:15 a.m.
CVE-2021-29466
2021-04-2201:15:07
Google
osv.dev
3
discord-recon
bot
vulnerability
remote attacker
local files
server
workaround
maintainer
patch
software
Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important information. As a workaround, a bot maintainer can locate the file app.py and add .replace('..', '') into the Path variable inside of the recon function. The vulnerability is patched in version 0.0.4.
Related
cvelist
cvelist
CVE-2021-29466 Path Traversal at Discord-Recon .recon Command Path
2021-04-22 00:35:13
cve
cve
CVE-2021-29466
2021-04-22 01:15:07
prion
prion
Design/Logic Flaw
2021-04-22 01:15:00
nvd
nvd
CVE-2021-29466
2021-04-22 01:15:07