Command Execution Vulnerability in Supybot-fedora by Fedora Foundation

CVE-2020-15853

What is CVE-2020-15853?

The supybot-fedora implementation of the 'refresh' command is vulnerable due to its impact on system responsiveness. When executed, this command refreshes the user cache from FAS, resulting in substantial delay while the operation completes. During this time, the zodbot becomes unresponsive to incoming requests, which may disrupt normal operations and hinder user interactions.

References