Back to Database
Status published
Critical
CVE-2024-21663
Remote code execution on ReconServer due to improper input sanitization on the prips command
Vulnerability Description
Discord-Recon is a Discord bot created to automate bug bounty recon, automated scans and information gathering via a discord server. Discord-Recon is vulnerable to remote code execution. An attacker is able to execute shell commands in the server without having an admin role. This vulnerability has been fixed in version 0.0.8.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-21663
Credits & Attribution
No credits recorded in the NVD database.
References
More from DEMON1A
View All →CVE-2021-29466
Path Traversal at Discord-Recon .recon Command Path
Medium
6.5
CVE-2021-29465
Remote file overwrite on discord-recon can result in DoS and Remote Code Execution
High
8.3
CVE-2021-29461
LFI and possible code execution on discord-recon using tools arguments
High
8.1
CVE-2021-21433
Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation
Critical
9.9
Affected Vendor
DEMON1A
View all reports →Affected Software
Discord-Recon
Vulnerable Versions:
< 0.0.8
Timeline
Official Publish:
January 8th, 2024
Last Modified:
September 4th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H