CVE-2022-39302CWE-863

Ree6 may bypass webhook protection

Medium · published October 13, 2022

CVSS v3.1
5.5
EPSS
1%
Percentile
44.6
In the wild
Unconfirmed
What it is

Ree6 is a moderation bot. This vulnerability would allow other server owners to create configurations such as "Better-Audit-Logging" which contain a channel from another server as a target. This would mean you could send log messages to another Guild channel and bypass raid and webhook protections. A specifically crafted log message could allow spamming and mass advertisements. This issue has been patched in version 1.9.9. There are currently no known workarounds.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00539 · 44.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-10-13T00:00Z
EPSS history
Timeline
  • 13 OCT 00:00Z
    Ree6 may bypass webhook protection
    cvelistv5