CVE-2022-36024highCWE-284CWE-862

CVE-2022-36024: falha de alta gravidade em Pycord-Development pycord

Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar pycord+ Monitorar py-cord

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.8%
py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that all public bots that use slash commands are affected. This issue has been patched in version 2.0.1. There are currently no recommended workarounds - please upgrade to a patched version.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Pycord-Development · pycord