CVE-2021-41250: pythondiscord bot

csirt@kutim:~/threat-intel/cve/CVE-2021-41250

CVSS 4.3 · Medium EPSS 0,76%

Kerentanan Improper Input Validation pada pythondiscord bot. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not trigger. This means that by including any non-blacklisted URL moderation filters can be bypassed. This issue has been resolved in commit 67390298852513d13e0213870e50fb3cff1424e0

Rincian

Terbit di NVD: 5 November 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-20: Improper Input Validation
EPSS (30 hari): 0,76% peluang dieksploitasi; lebih tinggi dari 54,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
pythondiscord	bot	Semua versi sebelum 67390298852513d13e0213870e50fb3cff1424e0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/python-discord/bot/commit/67390298852513d13e0213870e50fb3cff1424e0 patch · advisory pihak ketiga
https://github.com/python-discord/bot/security/advisories/GHSA-j8c3-8x46-8pp6 patch · advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.