CVE-2021-46701

PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's "now playing" status on Discord.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2022-02-20

Last modified

2024-08-04

Weaknesses

CWE-346

Affected products

• Premid (Premid)

References

• https://github.com/PreMiD/PreMiD/issues/790
• https://github.com/PreMiD/PreMiD/pull/791