From f91ff53fae7f4b3bdc5201837b5fc16d0aa01862 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 19 May 2025 16:27:17 +0000
Subject: [PATCH] Publish GHSA-mj2c-8hxf-ffvq

---
 .../GHSA-mj2c-8hxf-ffvq.json                  | 65 +++++++++++++++++++
 1 file changed, 65 insertions(+)
 create mode 100644 advisories/github-reviewed/2025/05/GHSA-mj2c-8hxf-ffvq/GHSA-mj2c-8hxf-ffvq.json

diff --git a/advisories/github-reviewed/2025/05/GHSA-mj2c-8hxf-ffvq/GHSA-mj2c-8hxf-ffvq.json b/advisories/github-reviewed/2025/05/GHSA-mj2c-8hxf-ffvq/GHSA-mj2c-8hxf-ffvq.json
new file mode 100644
index 00000000000..08075c753b9
--- /dev/null
+++ b/advisories/github-reviewed/2025/05/GHSA-mj2c-8hxf-ffvq/GHSA-mj2c-8hxf-ffvq.json
@@ -0,0 +1,65 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mj2c-8hxf-ffvq",
+  "modified": "2025-05-19T16:25:05Z",
+  "published": "2025-05-19T16:25:05Z",
+  "aliases": [
+    "CVE-2025-47948"
+  ],
+  "summary": "Cocotais Bot has builtin .echo command injection",
+  "details": "### Summary\n\nA command echoing feature in the framework allows users to indirectly trigger privileged behavior by injecting special platform tags. Specifically, an unauthorized user can use the `/echo <qqbot-at-everyone />` command to cause the bot to send a message that mentions all members in the chat, bypassing any permission controls. This can lead to spam, disruption, or abuse of notification systems.\n\n### Details\n\nThe framework provides a command `/echo` that causes the bot to repeat any user-provided message verbatim in the group chat. However, the bot fails to sanitize or filter platform-specific control elements such as `<qqbot-at-everyone />`, which, when included in a message, mentions everyone (i.e., @全体成员). While normal users are forbidden from using this tag in normal chats, the bot, which has higher privileges, is allowed to do so.\n\nSince the `/echo` command blindly echoes any content, a user can exploit this by sending:\n\n```\n/echo <qqbot-at-everyone />\n```\n\nThe bot will then send a message containing `<qqbot-at-everyone />`, causing the platform to interpret it as an @全体成员 command, effectively allowing an unauthorized user to @everyone via the bot.\n\n### PoC\n\n1. Set up a chatbot using the affected framework.\n2. Join the chat that includes the bot as a regular user with **no permission to use @全体成员**.\n3. Send the following message in the chat:\n\n```\n/echo <qqbot-at-everyone />\n```\n4. The bot will respond by repeating the message, and the platform will interpret `<qqbot-at-everyone />` as an @全体成员 mention.\n5. All the chat members receive a notification, despite the user lacking that permission.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [
+    {
+      "package": {
+        "ecosystem": "npm",
+        "name": "cocotais-bot"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "1.5.0-test2-hotfix"
+            },
+            {
+              "fixed": "1.6.2"
+            }
+          ]
+        }
+      ]
+    }
+  ],
+  "references": [
+    {
+      "type": "WEB",
+      "url": "https://github.com/cocotais/cocotais-bot/security/advisories/GHSA-mj2c-8hxf-ffvq"
+    },
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-47948"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/cocotais/cocotais-bot/commit/d1cf01a9a41b3131241d1833444b890c8d6e70b8"
+    },
+    {
+      "type": "PACKAGE",
+      "url": "https://github.com/cocotais/cocotais-bot"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": true,
+    "github_reviewed_at": "2025-05-19T16:25:05Z",
+    "nvd_published_at": "2025-05-17T19:15:46Z"
+  }
+}
\ No newline at end of file