CVE-2020-15147

Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted "going live" messages to inject code into the Streams module's going live message. By abusing this exploit, it's possible to perform destructive actions and/or access sensitive information. As a workaround, unloading the Trivia module with `unload streams` can render this exploit not accessible. It is highly recommended updating to 3.3.12 or 3.4 to completely patch this issue.

• CWE-94
• CWE-74

• https://github.com/Cog-Creators/Red-DiscordBot/pull/4183Patch, Third Party Advisory
• https://github.com/Cog-Creators/Red-DiscordBot/pull/4183/commits/e269ea0d3bc88417163c18431b1df38a9be92bfcPatch, Third Party Advisory
• https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-7257-96vg-qf6xThird Party Advisory
• https://github.com/Cog-Creators/Red-DiscordBot/pull/4183Patch, Third Party Advisory
• https://github.com/Cog-Creators/Red-DiscordBot/pull/4183/commits/e269ea0d3bc88417163c18431b1df38a9be92bfcPatch, Third Party Advisory
• https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-7257-96vg-qf6xThird Party Advisory

Published

Aug 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15140In Red Discord Bot before version 3.3.11, a RCE exploit has …9.6
• CVE-2020-15141In openapi-python-client before version 0.5.3, there is a pa…4.1
• CVE-2020-15142In openapi-python-client before version 0.5.3, clients gener…9
• CVE-2020-15143In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2…8.8
• CVE-2020-15145In Composer-Setup for Windows before version 6.0.0, if the d…8.2
• CVE-2020-15146In SyliusResourceBundle before versions 1.3.14, 1.4.7, 1.5.2…8.8
• CVE-2020-15148Yii 2 (yiisoft/yii2) before version 2.0.38 is vulnerable to …10
• CVE-2020-15149NodeBB before version 1.14.3 has a bug introduced in version…9.9
• CVE-2020-1515An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-15150There is a vulnerability in Paginator (Elixir/Hex package) w…9.8
• CVE-2020-15151OpenMage LTS before versions 19.4.6 and 20.0.2 allows attack…8
• CVE-2020-15152ftp-srv is an npm package which is a modern and extensible F…9.1