CVE-2022-39302

MEDIO 5.4CVE-2022-39302 · Published 14/10/2022 · updated 17/06/2026

In breve

CVE-2022-39302 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda ree6 (ree6).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.54%, superiore al 45.8% delle vulnerabilità.
Correzione: aggiornare a 1.9.9 o successiva.

Package	Affected versions	Patched versions
ree6 ree6	`< 1.9.9`	`1.9.9`

Description

Ree6 is a moderation bot. This vulnerability would allow other server owners to create configurations such as "Better-Audit-Logging" which contain a channel from another server as a target. This would mean you could send log messages to another Guild channel and bypass raid and webhook protections. A specifically crafted log message could allow spamming and mass advertisements. This issue has been patched in version 1.9.9. There are currently no known workarounds.

References

Ree6-Applications/Ree6 commit 459b5bc · Patch
Ree6-Applications/Ree6 security advisory · Third Party Advisory

Altre vulnerabilità di ree6

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free