{"id":"CVE-2021-46701","details":"PreMiD 2.2.0 allows unintended access via the websocket transport. An attacker can receive events from a socket and emit events to a socket, potentially interfering with a victim's \"now playing\" status on Discord.","modified":"2026-07-09T02:48:56.543818Z","published":"2022-02-20T21:15:07.437Z","references":[{"type":"FIX","url":"https://github.com/PreMiD/PreMiD/issues/790"},{"type":"FIX","url":"https://github.com/PreMiD/PreMiD/pull/791"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/premid/premid","events":[{"introduced":"b94f7b41ac14fd8960ba6f9e19605ae0acce1629"},{"last_affected":"b94f7b41ac14fd8960ba6f9e19605ae0acce1629"}],"database_specific":{"cpe":"cpe:2.3:a:premid:premid:2.2.0:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.2.0"},{"last_affected":"2.2.0"}],"source":"CPE_STRING"}}],"versions":["2.2.0","app-v2.2.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-46701.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}]}