CVE-2021-29466 in discord-recon정보

요약

\~에 의해 MITRE • 2021. 04. 22.

Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important information. As a workaround, a bot maintainer can locate the file `app.py` and add `.replace('..', '')` into the `Path` variable inside of the `recon` function. The vulnerability is patched in version 0.0.4.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

책임이 있는

GitHub, Inc.

예약하다

2021. 03. 30.

모더레이션

수락

항목

VDB-173278

EPSS

0.00703

출처

Might our Artificial Intelligence support you?

Check our Alexa App!