Skip to content
OpenAdvisories

Vendor

Spacebar Server

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    Spacebar Server Cross-Channel Message Deletion via Permission Check Bypass

    Spacebar Server before commit 8d126f4 contains a cross-channel message deletion vulnerability in the single-delete and bulk-delete message handlers that fail to scope message queries to the requested channel. Authenticated users with MANAGE_MESSAGES permissio…

  • Medium 4.3

    Spacebar Server Missing Authorization via member-ids Endpoint

    Spacebar Server before commit 51da17c contains a missing authorization vulnerability that allows any authenticated user to enumerate complete guild membership by querying the GET /guilds/{guild_id}/roles/{role_id}/member-ids endpoint without guild membership …