Threats tagged 'ghsa-237f-p9h6-wq4r'

UnrealIRCd versions 6.0.0 up to but not including 6.2.7.1 contain a vulnerability in the labeled-response module where the IRCv3 "label" message tag is not properly escaped. This flaw allows any user on a network with two or more linked servers to inject server-to-server commands that execute with server authority.