Paper/Archive/CVE-2021-21433

CVE-2021-21433

DEMON1A Discord-Recon — Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation

EPSS 3%CVSS 9.9

critical.is priorityof 100

CVSS 9.9 (CNA)9.9 / 10 × 3029.7 Not in CISA KEV+300.0 EPSS percentile 88.4.884 × 2017.7 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.

Affected

ProductAffectedFixed inSource

Discord-Recon<= 0.0.1–CNA

Scores by source

GitHub_M (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

References

refgithub.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x refgithub.com/DEMON1A/Discord-Recon/issues/6 refgithub.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50