Lucene search
GoogleOSV:GHSA-J257-JFVV-H3X5HistoryOct 13, 2020 - 5:30 p.m.
Privilege Escalation in Channelmgnt plug-in for Sopel
2020-10-1317:30:30
Google
osv.dev
12
privilege escalation
sopel
channelmgnt
malicious users
takeover
patches
version 1.0.3
workarounds
disable
references
phab.bots.miraheze.wiki
advisory
email
mirahezebots
software
EPSS
0.001
Percentile
41.7%
Impact
Malicious users are able to op/voice and take over a channel
Patches
On version 1.0.3
Workarounds
Disable channelmgnt
References
https://phab.bots.miraheze.wiki/T117
For more information
If you have any questions or comments about this advisory:
- Email us at staff(at)mirahezebots(dot)org
References
github.com/MirahezeBots/MirahezeBots
github.com/MirahezeBots/MirahezeBots/security/advisories/GHSA-23pc-4339-95vg
github.com/MirahezeBots/sopel-channelmgnt/pull/3
github.com/MirahezeBots/sopel-channelmgnt/security/advisories/GHSA-j257-jfvv-h3x5
nvd.nist.gov/vuln/detail/CVE-2020-15251
phab.bots.miraheze.wiki/phame/live/1/post/1/summary
phab.bots.miraheze.wiki/T117
pypi.org/project/sopel-plugins.channelmgnt
Related
github
github
Privilege Escalation in Channelmgnt plug-in for Sopel
2020-10-13 17:30:30
cvelist
cvelist
CVE-2020-15251 Privilege Escalation in Channelmgnt plug-in for Sopel
2020-10-13 17:15:17
nvd
nvd
CVE-2020-15251
2020-10-13 18:15:12
veracode
veracode
Privilege Escalation
2020-10-14 04:51:20
ubuntucve
ubuntucve
CVE-2020-15251
2020-10-13 00:00:00
osv
osv
PYSEC-2020-110
2020-10-13 18:15:00
cve
cve
CVE-2020-15251
2020-10-13 18:15:12
prion
prion
Security feature bypass
2020-10-13 18:15:00
attackerkb
attackerkb
CVE-2020-15251
2020-10-13 00:00:00