CVE-2020-15172

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-15172

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15172.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-15172

Aliases

GHSA-rm7m-j4xp-rv2p

Published

2020-09-15T19:15:13.057Z

Modified

2026-07-08T05:59:58.335456466Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The Act module for Red Discord Bot before commit 6b9f3b86 is vulnerable to Remote Code Execution. With this exploit, Discord users can use specially crafted messages to perform destructive actions and/or access sensitive information. Unloading the Act module with unload act can render this exploit inaccessible.

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:a:fluffycogs_project:fluffycogs:*:*:*:*:*:*:*:*"
            ],
            "vendor_product": "fluffycogs_project:fluffycogs",
            "extracted_events": [
                {
                    "fixed": "2.0.38"
                }
            ],
            "source": "CPE_RANGE"
        }
    ]
}

References

Affected packages

Git / github.com/zephyrkul/fluffycogs

Affected ranges

Type

GIT

Repo

https://github.com/zephyrkul/fluffycogs

Events

Introduced

Fixed

6b9f3b862e1f0a5429c62f3090f814e53a242347

Database specific

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15172.json"