In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard…
CVSS 3.1CRITICAL 9.6·Network·Low privileges·No interaction·EPSS 0.01156·Published 2020-08-21·Fixed in 3.3.11CWE-74