Vulnerabilities > CVE-2022-23604 - Unspecified vulnerability in X26-Cogs Project X26-Cogs

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

x26-cogs-project

NVD

Published: 2022-02-15

Updated: 2024-11-21

Summary

x26-Cogs is a repository of cogs made by Twentysix for the Red Discord bot. Among these cogs is the Defender cog, a tool for Discord server moderation. A vulnerability in the Defender cog prior to version 1.10.0 allows users with admin privileges to issue commands as other users who share the same server. If a bot owner shares the same server as the attacker, it is possible for the attacker to issue bot-owner restricted commands. The issue has been patched in version 1.10.0. One may unload the Defender cog as a workaround.

Vulnerable Configurations

Part	Description	Count
Application	X26-Cogs_Project X26 Cogs Project X26 Cogs - X26 Cogs Project X26 Cogs 1.0 X26 Cogs Project X26 Cogs 1.1 X26 Cogs Project X26 Cogs 1.2 X26 Cogs Project X26 Cogs 1.3 X26 Cogs Project X26 Cogs 1.4 X26 Cogs Project X26 Cogs 1.5 X26 Cogs Project X26 Cogs 1.6 X26 Cogs Project X26 Cogs 1.6.1 X26 Cogs Project X26 Cogs 1.7 X26 Cogs Project X26 Cogs 1.8 X26 Cogs Project X26 Cogs 1.9 X26 Cogs Project X26 Cogs 1.9.1	13

Summary

Vulnerable Configurations

References