Information disclosure in Duck-organization Quest-bot
CVE-2026-47177
Quest Bot is an opensource modern Discord Bot built for moderation, utilities and support. Prior to version 1.0.4, a user who can configure bot settings can set the ticket transcript channel to a channel they can read. When tickets are clo…
Vulnerability class: Information Disclosure
EPSS: 0.003 (16.6th percentile) — read the EPSS interpretation.
Affected products
- Duck-organization Quest-bot — versions < 1.0.4
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_CONFIRM)