CVE-2026-49347
MediumCVSS 5.3Summary
Quest Bot is an open-source Discord bot that, prior to version 1.1.8, allowed users to repeatedly create new ticket channels without restrictions. The latest version still creates a new database ticket and Discord channel for every completed ticket modal submission, without checking if the same user already has an open ticket.
Risk Assessment
Organizations may face excessive system load and chaos in ticket management, potentially leading to loss of control over user submissions.
Recommendation
It is recommended to update the bot to version 1.1.8 or later to patch this vulnerability and implement appropriate limits on ticket creation.
Original NVD description (English source)
Quest Bot is an opensource Discord Bot. Prior to version 1.1.8, any user who can access the ticket panel can repeatedly create new ticket channels. The latest release still creates a new database ticket and Discord channel for every completed ticket modal submission, without checking whether the same user already has an open ticket and without applying a cooldown. This issue has been patched in version 1.1.8.