CVE-2022-23604

ALTO 7.2CVE-2022-23604 · Published 15/02/2022 · updated 17/06/2026

In breve

CVE-2022-23604 è una vulnerabilità ALTO (CVSS 7.2) che riguarda x26-cogs (x26-cogs project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.1%, superiore al 66.6% delle vulnerabilità.
Correzione: aggiornare a 1.10.0 o successiva.

Package	Affected versions	Patched versions
x26-cogs x26-cogs_project	`< 1.10.0`	`1.10.0`

Description

x26-Cogs is a repository of cogs made by Twentysix for the Red Discord bot. Among these cogs is the Defender cog, a tool for Discord server moderation. A vulnerability in the Defender cog prior to version 1.10.0 allows users with admin privileges to issue commands as other users who share the same server. If a bot owner shares the same server as the attacker, it is possible for the attacker to issue bot-owner restricted commands. The issue has been patched in version 1.10.0. One may unload the Defender cog as a workaround.

References

Twentysix26/x26-Cogs commit 72dd932 · Patch
Twentysix26/x26-Cogs release v1.10 · Release Notes
Twentysix26/x26-Cogs security advisory · Issue Tracking

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free