{"id":"CVE-2020-15140","aliases":["GHSA-55j9-849x-26h4","PYSEC-2020-265"],"url":"https://o3.security/vulnerability/CVE-2020-15140","summary":"Remote Code Execution in Red Discord Bot","details":"In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module's leaderboard command. By abusing this exploit, it's possible to perform destructive actions and/or access sensitive information. This critical exploit has been fixed on version 3.3.11.","published":"2020-08-21T17:15:13.287Z","modified":"2026-07-09T00:21:35.543532Z","cvss":{"score":9.6,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"PyPI","name":"red-discordbot","fixedVersion":"3.3.11"}],"fix":{"url":"https://github.com/Cog-Creators/Red-DiscordBot/pull/4175/commits/9ab536235bafc2b42c3c17d7ce26f1cc64482a81","label":"Cog-Creators/Red-DiscordBot#4175"},"references":[{"type":"ADVISORY","url":"https://github.com/Cog-Creators/Red-DiscordBot/security/advisories/GHSA-55j9-849x-26h4"},{"type":"FIX","url":"https://github.com/Cog-Creators/Red-DiscordBot/pull/4175/commits/9ab536235bafc2b42c3c17d7ce26f1cc64482a81"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-09T00:21:35.543532Z"}}