cve.bz

CVE-2021-29502

6.5 mediumEPSS 0.8%

Medium (6.5) in warnsystem project warnsystem. EPSS 0.8% chance of exploitation in the next 30 days.

WarnSystem is a cog (plugin) for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been patched in version 1.3.18. Users should update and type `!warnsysteminfo` to check that their version is 1.3.18 or above. As a workaround users may unload the WarnSystem cog or disable the `!warnset description` command globally.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWEs
CWE-94, CWE-74
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON