NicPWNs/MEGABOT

Releases37

Frequency4 weeks 8 hours

Last Release 5 months ago

Stars3

The MEGACORD official Discord bot.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-43404 ↗	Aug 20, 2024Tuesday, 20 August 2024, 15:15	9.8 CRITICAL	—
MEGABOT is a fully customized Discord bot for learning and fun. The `/math` command and functionality of MEGABOT versions < 1.5.0 contains a remote code execution vulnerability due to a Python `eval()`. The vulnerability allows an attacker to inject Python code into the `expression` parameter when using `/math` in any Discord channel. This vulnerability impacts any discord guild utilizing MEGABOT. This vulnerability was fixed in release version 1.5.0.