CVE-2021-21433 | Discord Recon Server is a bot that allows you to do your rec… | CVSS 9.9 CRITICAL

Description

Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.

Metadata

CVE ID: CVE-2021-21433
State: PUBLISHED
Assigner: GitHub_M
Reserved: 2020-12-22 00:00 UTC
Published: 2021-04-09 17:55 UTC
Last updated: 2024-08-03 18:16 UTC
Primary CWE: CWE-94
CWE-94 Improper Control of Generation of Code ('Code Injecti…
Vendor / Product: DEMON1A / Discord-Recon
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

Affected products (1)

Vendor	Product	Platform	Versions
DEMON1A	Discord-Recon	—	<= 0.0.1

Weakness (CWE)

CWE	Source	Description
CWE-94	cna	CWE-94 Improper Control of Generation of Code ('Code Injection')

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H

References (3)