{"api_version":"1","generated_at":"2026-07-23T15:17:00+00:00","cve":"CVE-2021-21433","urls":{"html":"https://cve.report/CVE-2021-21433","api":"https://cve.report/api/cve/CVE-2021-21433.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2021-21433","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-21433"},"summary":{"title":"CVE-2021-21433","description":"Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.","state":"PUBLIC","assigner":"security-advisories@github.com","published_at":"2021-04-09 18:15:00","updated_at":"2024-01-12 15:05:00"},"problem_types":["CWE-78"],"metrics":[],"references":[{"url":"https://github.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50","name":"https://github.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50","refsource":"MISC","tags":[],"title":"Fixing Command Injection Issues. · DEMON1A/Discord-Recon@26e2a08 · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x","name":"https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x","refsource":"CONFIRM","tags":[],"title":"Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation · Advisory · DEMON1A/Discord-Recon · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://github.com/DEMON1A/Discord-Recon/issues/6","name":"https://github.com/DEMON1A/Discord-Recon/issues/6","refsource":"MISC","tags":[],"title":"Blind-RCE On .dirsearch and .arjun Commands. · Issue #6 · DEMON1A/Discord-Recon · GitHub","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21433","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21433","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2021","cve_id":"21433","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"demon1a","cpe5":"discord-recon","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2021","cve_id":"21433","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"discord-recon_project","cpe5":"discord-recon","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"security-advisories@github.com","ID":"CVE-2021-21433","STATE":"PUBLIC","TITLE":"Remote code execution on discord-recon .dirsearch and .arjun commands due to improper input validation"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Discord-Recon","version":{"version_data":[{"version_value":"<= 0.0.1"}]}}]},"vendor_name":"DEMON1A"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2."}]},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"LOW","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-94 Improper Control of Generation of Code ('Code Injection')"}]}]},"references":{"reference_data":[{"name":"https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x","refsource":"CONFIRM","url":"https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x"},{"name":"https://github.com/DEMON1A/Discord-Recon/issues/6","refsource":"MISC","url":"https://github.com/DEMON1A/Discord-Recon/issues/6"},{"name":"https://github.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50","refsource":"MISC","url":"https://github.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50"}]},"source":{"advisory":"GHSA-65fm-5x64-gv9x","discovery":"UNKNOWN"}},"nvd":{"publishedDate":"2021-04-09 18:15:00","lastModifiedDate":"2024-01-12 15:05:00","problem_types":["CWE-78"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P","accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":6.5},"severity":"MEDIUM","exploitabilityScore":8,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:demon1a:discord-recon:*:*:*:*:*:*:*:*","versionEndExcluding":"0.0.2","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2021","CveId":"21433","Ordinal":"195559","Title":"CVE-2021-21433","CVE":"CVE-2021-21433","Year":"2021"},"notes":[{"CveYear":"2021","CveId":"21433","Ordinal":"1","NoteData":"Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2.","Type":"Description","Title":null},{"CveYear":"2021","CveId":"21433","Ordinal":"2","NoteData":"2021-04-09","Type":"Other","Title":"Published"},{"CveYear":"2021","CveId":"21433","Ordinal":"3","NoteData":"2021-04-09","Type":"Other","Title":"Modified"}]}}}