{"action":"Upgrade red-discordbot to 3.4.1 or later.","affected":[{"fixed":"3.4.1","introduced":"0"}],"component":"red-discordbot","cve_ids":["CVE-2020-15278"],"ecosystem":"PyPI","epss":0.01087,"exploited":false,"fixed_versions":["3.4.1"],"ghsa_id":"GHSA-mp9m-g7qj-6vqr","id":"tcs_01M5KGA4RY5GB1SWSH2X0E0ZCQ","modified_at":"2023-11-08T04:02:36.567886Z","published_at":"2020-10-28T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2020-267","https://github.com/Cog-Creators/Red-DiscordBot/commit/726bfd38adfdfaef760412a68e01447b470f438b","https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-mp9m-g7qj-6vqr","https://github.com/Cog-Creators/Red-DiscordBot/releases/tag/3.4.1"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2020-267","url":"https://osv.dev/vulnerability/PYSEC-2020-267"}],"summary":"Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit allows Discord users with a high privilege level within the guild to bypass hierar"}