CVE-2022-21669

CVE-2022-21669 describes a critical vulnerability in PuddingBot versions 0.0.6-b933652 and prior, where the bot's authentication token was publicly exposed in the main.py file. This exposure allowed unauthorized access to the bot, posing a significant risk of compromise. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-exploitable flaw with low attack complexity and high confidentiality impact, as an attacker could gain full control of the bot. While the bot token has been revoked and a new version is running, the code update is pending. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.