CVE-2021-29502

WarnSystem is a cog (plugin) for the Red discord bot. A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template which is not properly sanitized. The problem has been patched in version 1.3.18. Users should update and type `!warnsysteminfo` to check that their version is 1.3.18 or above. As a workaround users may unload the WarnSystem cog or disable the `!warnset description` command globally.

• CWE-74
• CWE-94

• https://github.com/retke/Laggrons-Dumb-Cogs/commit/c79dd2cc879989cf2018e76ba2aad0baef3b4ec8Patch, Third Party Advisory
• https://github.com/retke/Laggrons-Dumb-Cogs/security/advisories/GHSA-834g-67vv-m9wqMitigation, Patch, Third Party Advisory
• https://github.com/retke/Laggrons-Dumb-Cogs/commit/c79dd2cc879989cf2018e76ba2aad0baef3b4ec8Patch, Third Party Advisory
• https://github.com/retke/Laggrons-Dumb-Cogs/security/advisories/GHSA-834g-67vv-m9wqMitigation, Patch, Third Party Advisory

Published

May 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29492Envoy is a cloud-native edge/middle/service proxy. Envoy doe…8.3
• CVE-2021-29493Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE ex…8.8
• CVE-2021-29495Nim is a statically typed compiled systems programming langu…7.5
• CVE-2021-29499SIF is an open source implementation of the Singularity Cont…7.5
• CVE-2021-29500bubble fireworks is an open source java package relating to …7.5
• CVE-2021-29501Ticketer is a command based ticket system cog (plugin) for t…6.5
• CVE-2021-29503HedgeDoc is a platform to write and share markdown. HedgeDoc…6.1
• CVE-2021-29504WP-CLI is the command-line interface for WordPress. An impro…7.4
• CVE-2021-29505XStream is software for serializing Java objects to XML and …8.8
• CVE-2021-29506GraphHopper is an open-source Java routing engine. In GrassH…6.5
• CVE-2021-29507GENIVI Diagnostic Log and Trace (DLT) provides a log and tra…6.5
• CVE-2021-29508Due to how Wire handles type information in its serializatio…9.1