← voltar
CVE-2026-47196

Quest Bot: Empty automod rule causes every guild message to be deleted

CVSS 8.4 HIGHEPSS 0.2%CWE-20
Quest Bot is an opensource Discord Bot. Prior to version 1.1.6, the automod add command trims user input but does not reject an empty result. Adding a rule containing only whitespace stores an empty word. The message listener later checks content.includes(""), which is always true, causing the bot to delete every non-bot guild message. This issue has been patched in version 1.1.6.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:H

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →