CVE-2018-25093

Vaerys-Dawn DiscordSailv2 Tag access control

State: Published
Severity: 5.5 Medium
Published: Nov 6, 2023
Updated: Aug 5, 2024
Reserved: Nov 4, 2023

Description

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The name of the patch is cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-244484.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	VulDB
3.0	5.5 Medium	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L	VulDB
2.0	5.2 Medium	AV:A/AC:L/Au:S/C:P/I:P/A:P	VulDB

Weaknesses

CWE-284 Improper Access Controls

Affected Products

Product	Versions
DiscordSailv2Vaerys-Dawn	2.10.0Affected 2.10.1Affected 2.10.2Affected

References

https://vuldb.com/?id.244484vdb-entry
https://vuldb.com/?ctiid.244484signaturepermissions-required
https://github.com/Vaerys-Dawn/DiscordSailv2/commit/cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69patch
https://github.com/Vaerys-Dawn/DiscordSailv2/releases/tag/2.10.3patch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.