CVE-2018-25092

CRITICO 9.8CVE-2018-25092 · Published 05/11/2023 · updated 17/06/2026

In breve

CVE-2018-25092 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda discordsailv2 (vaerys-dawn).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.60%, superiore al 48.7% delle vulnerabilità.
Correzione: aggiornare a 2.10.3 o successiva.

Package	Affected versions	Patched versions
discordsailv2 vaerys-dawn	`< 2.10.3`	`2.10.3`

Description

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Command Mention Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The patch is named cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-244483.

References

Vaerys-Dawn/DiscordSailv2 commit cc12e0b · Patch
Vaerys-Dawn/DiscordSailv2 release 2.10.3 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Altre vulnerabilità di discordsailv2

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free