search

Heath123 / discross

A webhook bridge to send messages on Discord through a webpage
GNU Affero General Public License v3.0
41 stars 15 forks source link

Server list shows servers I'm not in #25

Open crisscrosss opened 1 year ago

crisscrosss commented 1 year ago

Discross seems to be buggy and at a high capacity at the moment, but occasionally when refreshing the page instead of the servers I've added it shows this server

Screenshot 2023-04-22 at 6 00 48 p m

this looks like a private server, and unless it's some placeholder icon this could be a security risk, as it could mean other people might be able to access private servers they aren't in.

crisscrosss commented 1 year ago

i did a little digging and it looks like its a real server. its a public server but it looks like the server isn't really meant to be found. i've talked to the owner of the server and it seems like they only just added the discross bot.

discross only showed the icon of the server but if it may be possible to read the contents of the server with enough effort.

this may be a major security risk with discross as even if only the server icon is shown, the icon may show personal information or photos.