CVE-2020-15278: Incorrect Authorization
(updated )
Red Discord Bot has an unauthorized privilege escalation vulnerability in the Mod
module. This vulnerability allows Discord users with a high privilege level within the guild to bypass hierarchy checks when the application is in a specific condition that is beyond that user’s control. By abusing this vulnerability, it is possible to perform destructive actions within the guild the user has high privileges in.
References
Detect and mitigate CVE-2020-15278 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →