CVE-2026-47163
概要

Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.1, any guild member who can invoke slash commands can use /automod add, /automod remove, and /automod list because the command has no Discord default permission requirement and no runtime moderator permission check. An attacker can add a rule matching common text and make the bot delete other users’ messages. This issue has been patched in version 1.0.1.

公表日 2026年6月12日4:16
登録日 2026年6月13日4:14
最終更新日 2026年6月12日5:58
関連情報、対策とツール
共通脆弱性一覧