CVE-2022-39302

Ree6 is a moderation bot. This vulnerability would allow other server owners to create configurations such as "Better-Audit-Logging" which contain a channel from another server as a target. This would mean you could send log messages to another Guild channel and bypass raid and webhook protections. A specifically crafted log message could allow spamming and mass advertisements. This issue has been patched in version 1.9.9. There are currently no known workarounds.

• CWE-863

• https://github.com/Ree6-Applications/Ree6/commit/459b5bc24f0ea27e50031f563373926e94b9aa0aPatch, Third Party Advisory
• https://github.com/Ree6-Applications/Ree6/security/advisories/GHSA-v574-xgcf-5w8xThird Party Advisory
• https://github.com/Ree6-Applications/Ree6/commit/459b5bc24f0ea27e50031f563373926e94b9aa0aPatch, Third Party Advisory
• https://github.com/Ree6-Applications/Ree6/security/advisories/GHSA-v574-xgcf-5w8xThird Party Advisory

Published

Oct 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39297MelisCms provides a full CMS for Melis Platform, including t…9.8
• CVE-2022-39298MelisFront is the engine that displays website hosted on Mel…9.8
• CVE-2022-39299Passport-SAML is a SAML 2.0 authentication provider for Pass…8.1
• CVE-2022-3930The Directorist WordPress plugin before 7.4.2.2 suffers from…6.5
• CVE-2022-39300node SAML is a SAML 2.0 library based on the SAML implementa…8.1
• CVE-2022-39301sra-admin is a background rights management system that sepa…5.4
• CVE-2022-39303Ree6 is a moderation bot. This vulnerability allows manipula…9.8
• CVE-2022-39304ghinstallation provides transport, which implements http.Rou…4.7
• CVE-2022-39305Gin-vue-admin is a backstage management system based on vue …9.8
• CVE-2022-39306Grafana is an open-source platform for monitoring and observ…8.1
• CVE-2022-39307Grafana is an open-source platform for monitoring and observ…5.3
• CVE-2022-39308GoCD is a continuous delivery server. GoCD helps you automat…5.9