PT-2021-23214 · Unknown · Python Discord Bot

Akarys42 · Published 2021-11-05 · Updated 2023-07-17 · CVE-2021-41250

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Python discord bot (affected versions not specified)

Description The issue concerns the Python discord bot, which is the community bot for the Python Discord community. In affected versions, when a non-blacklisted URL and an otherwise triggering filter token are included in the same message, the token filter does not trigger. This means that by including any non-blacklisted URL, moderation filters can be bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2021-41250

GHSA-J8C3-8X46-8PP6

Affected Products

Python Discord Bot

References · 6

• https://github.com/python-discord/bot/commit/67390298852513d13e0213870e50fb3cff1424e0 · Patch
• https://github.com/python-discord/bot/security/advisories/GHSA-j8c3-8x46-8pp6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-41250 · Security Note
• https://osv.dev/vulnerability/CVE-2021-41250 · Vendor Advisory
• https://t.me/cibsecurity/31929 · Telegram Post
• https://t.me/cvenotify/23085 · Telegram Post