Homepage
About Snyk

red-discordbot@3.5.3 vulnerabilities

A highly customisable Discord bot

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the red-discordbot package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Incorrect Authorization

Red-DiscordBot is an A highly customisable Discord bot

Affected versions of this package are vulnerable to Incorrect Authorization through the commands API. An attacker can bypass authorization checks by exploiting the lack of additional permission controls in third-party cogs that use the @commands.can_manage_channel() permission check.

Note

The following command permission checks are unaffected:

@commands.mod_or_can_manage_channel()

@commands.admin_or_can_manage_channel()

@commands.guildowner_or_can_manage_channel()

How to fix Incorrect Authorization?

Upgrade Red-DiscordBot to version 3.5.10 or higher.

[3.5.0,3.5.10)
Go back to all versions of this package