CVE-2021-29501

FAUCET Score

CVE-2021-29501 is a sensitive information exposure vulnerability affecting the Ticketer cog (plugin) for the Red Discord bot, specifically versions prior to 1.0.1. This medium-severity vulnerability (CVSS 6.5) allows authenticated Discord users to remotely access sensitive information with low attack complexity and no user interaction required. While no public exploits or active exploitation have been observed, and community discussion is minimal, users should upgrade to version 1.0.1 or unload the Ticketer cog as a workaround.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 1.0.1CPE matchmatch criteria	cpe:2.3:a:dav-cogs_project:dav-cogs::::::::

CVSS Data

CVSS version used by this source: 3.1

8.1HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

Exploitability Score

2.8

Impact Score

5.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.89%

Probability of exploitation in next 30 days

EPSS Percentile

55.6%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0089 is in the 68th percentile among its peer group of 21,958 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

github_advisorypatch availablevia nvd_reference

View patch

References

github.com / Dav-Git/Dav-Cogs/commit/3d54ef9b52ce03f139b7d6c1cc38c375e65593fd

PatchThird Party Advisory

github.com / Dav-Git/Dav-Cogs/security/advisories/GHSA-r2cf-49r7-pfj7

Third Party Advisory