Lucene search
GoogleOSV:CVE-2021-25835HistoryFeb 08, 2021 - 6:15 p.m.
CVE-2021-25835
2021-02-0818:15:13
Google
osv.dev
4
Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature schemes with ethereum for compatibility, a verified signature in ethereum is still valid in ethermint with the same msg content and chainIDEpoch, which enables “cross-chain transaction replay” attack.
Related
github
github
Authentication bypass by capture-replay in github.com/cosmos/ethermint
2022-02-15 01:57:18
osv
osv
Authentication bypass by capture-replay in github.com/cosmos/ethermint
2022-02-15 01:57:18
cve
cve
CVE-2021-25835
2021-02-08 18:15:13
cvelist
cvelist
CVE-2021-25835
2021-02-08 17:57:19
nvd
nvd
CVE-2021-25835
2021-02-08 18:15:13
veracode
veracode
Cross-Chain Transaction Replay Attack
2021-02-09 03:30:25
prion
prion
Cross site scripting
2021-02-08 18:15:00