CVE-2021-21433

Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation

State: Published
Severity: 9.9 Critical
Published: Apr 9, 2021
Updated: Aug 3, 2024
Reserved: Dec 22, 2020

Description

Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.

Scores

CVSS	Score	Vector	Source
3.1	9.9 Critical	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H	GitHub_M

Weaknesses

CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

Product	Versions
Discord-ReconDEMON1A	<= 0.0.1Affected

References

https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x
https://github.com/DEMON1A/Discord-Recon/issues/6
https://github.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.