CVE-2021-41250 - CVE House
Back to Database
Status published Medium CVE-2021-41250

Presence of non-blacklisted URL bypasses all other filters

Vulnerability Description

Python discord bot is the community bot for the Python Discord community. In affected versions when a non-blacklisted URL and an otherwise triggering filter token is included in the same message the token filter does not trigger. This means that by including any non-blacklisted URL moderation filters can be bypassed. This issue has been resolved in commit 67390298852513d13e0213870e50fb3cff1424e0

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-41250

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

python-discord

View all reports →

Affected Software

bot
Vulnerable Versions:
< 67390298852513d13e0213870e50fb3cff1424e0

Timeline

Official Publish: November 5th, 2021
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)