Skip to content
OpenAdvisories

Package · PyPI

sopel-plugins-channelmgnt

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.6
    CVE-2021-21431

    Improper Input Validation in sopel-plugins.channelmgnt

    sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have …

    MirahezeBots sopel-channelmgnt sopel-plugins-channelmgnt PyPI
  • High 7.7
    CVE-2020-15251

    Privilege Escalation in Channelmgnt plug-in for Sopel

    In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less …

    MirahezeBots sopel-channelmgnt sopel-plugins-channelmgnt sopel Ubuntu PyPI