Impact

What kind of vulnerability is it? Who is impacted?

A vulnerability has been found in the code that allows any user to access sensible informations by setting up a specific template.

Patches

Has the problem been patched? What versions should users upgrade to?

The problem has been patched here: c79dd2c

Users should update and type !warnsysteminfo to check that their version is 1.3.18 or above.

Workarounds

Is there a way for users to fix or remediate the vulnerability without upgrading?

Unload the WarnSystem cog or disable the !warnset description command globally.

For more information

If you have any questions or comments about this advisory:

• Open an issue in Laggron's Dumb Cogs
• Post your questions in my server or the cog support server in the channel #support_laggrons-dumb-cogs