CVE-2018-25093

CRITICO 9.8CVE-2018-25093 · Published 06/11/2023 · updated 17/06/2026

In breve

CVE-2018-25093 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda discordsailv2 (vaerys-dawn).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.59%, superiore al 48.4% delle vulnerabilità.
Correzione: aggiornare a 2.10.3 o successiva.

Package	Affected versions	Patched versions
discordsailv2 vaerys-dawn	`< 2.10.3`	`2.10.3`

Description

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The name of the patch is cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-244484.

References

Vaerys-Dawn/DiscordSailv2 commit cc12e0b · Patch
Vaerys-Dawn/DiscordSailv2 release 2.10.3 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Altre vulnerabilità di discordsailv2

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free