{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-27T05:04:20.213","vulnerabilities":[{"cve":{"id":"CVE-2024-43404","sourceIdentifier":"security-advisories@github.com","published":"2024-08-20T15:15:23.867","lastModified":"2026-06-17T07:50:58.900","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"MEGABOT is a fully customized Discord bot for learning and fun. The `/math` command and functionality of MEGABOT versions < 1.5.0 contains a remote code execution vulnerability due to a Python `eval()`. The vulnerability allows an attacker to inject Python code into the `expression` parameter when using `/math` in any Discord channel. This vulnerability impacts any discord guild utilizing MEGABOT. This vulnerability was fixed in  release version 1.5.0."},{"lang":"es","value":"MEGABOT es un bot de Discord totalmente personalizado para aprender y divertirse. El comando `/math` y la funcionalidad de las versiones de MEGABOT &lt;1.5.0 contienen una vulnerabilidad de ejecución remota de código debido a una `eval()` de Python. La vulnerabilidad permite a un atacante inyectar código Python en el parámetro `expresión` cuando se usa `/math` en cualquier canal de Discord. Esta vulnerabilidad afecta a cualquier gremio de discordia que utilice MEGABOT. Esta vulnerabilidad se solucionó en la versión 1.5.0."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"NicPWNs","product":"MEGABOT","versions":[{"version":"< 1.5.0","status":"affected"}]}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","affectedData":[{"vendor":"megacord","product":"megabot","defaultStatus":"unknown","cpes":["cpe:2.3:a:megacord:megabot:*:*:*:*:*:*:*:*"],"versions":[{"version":"0","lessThan":"1.5.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-08-20T20:07:50.076252Z","id":"CVE-2024-43404","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-95"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-94"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:megacord:megabot:*:*:*:*:*:*:*:*","versionEndExcluding":"1.5.0","matchCriteriaId":"F3BDF1BF-C31D-4E71-AD47-05CBA3B7FD60"}]}]}],"references":[{"url":"https://github.com/NicPWNs/MEGABOT/commit/71e79e5581ea36313700385b112d863053fb7ed6","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/NicPWNs/MEGABOT/issues/137","source":"security-advisories@github.com","tags":["Issue Tracking"]},{"url":"https://github.com/NicPWNs/MEGABOT/pull/138","source":"security-advisories@github.com","tags":["Issue Tracking","Patch"]},{"url":"https://github.com/NicPWNs/MEGABOT/releases/tag/v1.5.0","source":"security-advisories@github.com","tags":["Release Notes"]},{"url":"https://github.com/NicPWNs/MEGABOT/security/advisories/GHSA-vhxp-4hwq-w3p2","source":"security-advisories@github.com","tags":["Patch","Vendor Advisory"]}]}}]}