CVE-2026-47177CWE-200

Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility channel

Medium · published June 11, 2026

CVSS v4.0
5.7
EPSS
0%
Percentile
35.8
In the wild
Unconfirmed
What it is

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can set the ticket transcript channel to a channel they can read. When tickets are closed, the bot exports the full ticket history and sends it to that configured transcript channel. This can expose private ticket messages to users who could not read the original ticket channel. This issue has been patched in version 1.0.4.

The record
Technical detail
CVSS v4.0
5.7 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00425 · 35.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2026-06-11T18:30Z
EPSS history
Timeline
  • 11 JUN 18:30Z
    Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility channel
    cvelistv5