Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
kedi ElectronCord's Discord Token is public
Vulnerability Description
kedi ElectronCord is a bot management tool for Discord. Commit aaaeaf4e6c99893827b2eea4dd02f755e1e24041 exposes an account access token in the `config.json` file. Malicious actors could potentially exploit this vulnerability to gain unauthorized access to sensitive information or perform malicious actions on behalf of the repository owner. As of time of publication, it is unknown whether the owner of the repository has rotated the token or taken other mitigation steps aside from informing users of the situation.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
信息暴露
Vulnerability Title
kedi ElectronCord 安全漏洞
Vulnerability Description
kedi ElectronCord是适用于 Discord 的机器人管理工具。 kedi ElectronCord 存在安全漏洞，该漏洞源于允许在“config.json”文件中公开帐户访问令牌。
CVSS Information
N/A
Vulnerability Type
N/A