Skip to content
OpenAdvisories

Package · PyPI

sopel-plugins-channelmgnt

2 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.6

    Improper Input Validation in sopel-plugins.channelmgnt

    sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have …

  • High 7.7

    Privilege Escalation in Channelmgnt plug-in for Sopel

    In the Channelmgnt plug-in for Sopel (a Python IRC bot) before version 1.0.3, malicious users are able to op/voice and take over a channel. This is an ACL bypass vulnerability. This plugin is bundled with MirahezeBot-Plugins with versions from 9.0.0 and less …