Threat Investigation
Request a demo

CVE-2021-41250

Medium

Description

Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not trigger. This means that by including any non-blacklisted URL moderation filters can be bypassed. This issue has been resolved in commit 67390298852513d13e0213870e50fb3cff1424e0

SeverityMedium
CVSS4.3
Exploit probability—
ProductPythondiscord Bot
PublishedNov 5, 2021
First seenNov 5, 2021
Weakness typeCWE-20Improper input validation

How to fix

Update
  • pythondiscord bot67390298852513d13e0213870e50fb3cff1424e0 or later

Affected products

ProductAffected versionsFixed in
pythondiscord botv < 67390298852513d13e0213870e50fb3cff1424e067390298852513d13e0213870e50fb3cff1424e0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.