CVE-2022-23604

Katalog CVE

CVSS 7.2 · High EPSS 1,1%

Kerentanan Improper Privilege Management pada x26-cogs project x26-cogs. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

x26-Cogs is a repository of cogs made by Twentysix for the Red Discord bot. Among these cogs is the Defender cog, a tool for Discord server moderation. A vulnerability in the Defender cog prior to version 1.10.0 allows users with admin privileges to issue commands as other users who share the same server. If a bot owner shares the same server as the attacker, it is possible for the attacker to issue bot-owner restricted commands. The issue has been patched in version 1.10.0. One may unload the Defender cog as a workaround.

Rincian

Terbit di NVD

15 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 65,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Twentysix26/x26-Cogs/commit/72dd9323cb4c90f3a5accac7087605375d178246 patch · advisory pihak ketiga
• https://github.com/Twentysix26/x26-Cogs/releases/tag/v1.10 release notes · advisory pihak ketiga
• https://github.com/Twentysix26/x26-Cogs/security/advisories/GHSA-cfh8-v56j-5757 issue tracking · advisory pihak ketiga