Skip to content
OpenAdvisories
Low · 2.4 CVE-2021-32632 EUVD-2021-19462

CSRF allowing modification of commands, modules, banphrases through hidden iFrames

Published May 20, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

Pajbot is a Twitch chat bot. Pajbot versions prior to 1.52 are vulnerable to cross-site request forgery (CSRF). Hosters of the bot should upgrade to `v1.52` or `stable` to install the patch or, as a workaround, can add one modern dependency.

Affected products

VendorProductAffectedFixed
pajbot pajbot < 1.52 —

References