Vulnerabilities > CVE-2021-37696 - Unspecified vulnerability in Tmerc-Cogs Project Tmerc-Cogs

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
tmerc-cogs-project
NVD
Published: 2021-08-11
Updated: 2024-11-21

Summary

tmerc-cogs are a collection of open source plugins for the Red Discord bot. A vulnerability has been found in the code that allows any user to access sensitive information by crafting a specific MassDM message. Issue is patched in commit 92325be650a6c17940cc52611797533ed95dbbe1. All users are advised to update to the current commit. As a workaround users may unload the MassDM cog or globally disable the `[p]massdm` command.

Vulnerable Configurations

Part Description Count
Application
Tmerc-Cogs_Project
1

References