Vulnerability	Vulnerable Version
M Incorrect Authorization Red-DiscordBot is an A highly customisable Discord bot Affected versions of this package are vulnerable to Incorrect Authorization through the commands API. An attacker can bypass authorization checks by exploiting the lack of additional permission controls in third-party cogs that use the `@commands.can_manage_channel()` permission check. Note The following command permission checks are unaffected: `@commands.mod_or_can_manage_channel()` `@commands.admin_or_can_manage_channel()` `@commands.guildowner_or_can_manage_channel()` How to fix Incorrect Authorization? Upgrade `Red-DiscordBot` to version 3.5.10 or higher.	[3.5.0,3.5.10)

Incorrect Authorization

Red-DiscordBot is an A highly customisable Discord bot

Affected versions of this package are vulnerable to Incorrect Authorization through the commands API. An attacker can bypass authorization checks by exploiting the lack of additional permission controls in third-party cogs that use the @commands.can_manage_channel() permission check.

Note

The following command permission checks are unaffected:

@commands.mod_or_can_manage_channel()

@commands.admin_or_can_manage_channel()

@commands.guildowner_or_can_manage_channel()

How to fix Incorrect Authorization?

Upgrade Red-DiscordBot to version 3.5.10 or higher.

[3.5.0,3.5.10)

Go back to all versions of this package