Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-25093: Vaerys-Dawn DiscordSailv2 Tag Handler: Critical Access Control Issue

CVE-2018-25093 · published 3 years ago

Summary

A critical security issue affects Vaerys-Dawn DiscordSailv2 versions up to 2.10.2. This issue allows an attacker to access something they shouldn't, which could lead to unauthorized actions. To fix this, update to version 2.10.3, which has already been released.

What to do

Update vaerys-dawn discordsailv2 to version 2.10.3 or later.

Affected software

Vendor	Product	Affected versions
vaerys-dawn	discordsailv2	< 2.10.3 `cpe:2.3:a:vaerys-dawn:discordsailv2::::::::`

Original advisory text

A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The name of the patch is cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-244484.

References

https://github.com/Vaerys-Dawn/DiscordSailv2/commit/cc12e0be82a5d05d9f359ed8e560... Patch
https://github.com/Vaerys-Dawn/DiscordSailv2/releases/tag/2.10.3 Release Notes
https://vuldb.com/?ctiid.244484 Permissions Required
https://vuldb.com/?id.244484 Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-284Improper Access Control

Timeline

Published6 Nov 2023

Updated4 Nov 2026

First seen11 Apr 2026

Sources

CVE-2018-25093 · OSV

CVE-2018-25093 · NVD

Track software like this

Free during beta