title: Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation
description: Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.
problem types: CWE-94 Improper Control of Generation of Code ('Code Injection')
affected:
{
product: Discord-Recon
vendor: DEMON1A
versions:
status: affected, version: <= 0.0.1
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 9.9
baseSeverity: CRITICAL
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
version: 3.1
]