Lucene search

K
osvGoogleOSV:GHSA-93P5-8FQW-WJX3
HistoryFeb 15, 2022 - 1:57 a.m.

Authentication bypass by capture-replay in github.com/cosmos/ethermint

2022-02-1501:57:18
Google
osv.dev
5

0.001 Low

EPSS

Percentile

36.1%

Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application.

Specific Go Packages Affected

github.com/cosmos/ethermint/rpc/namespaces/eth

CPENameOperatorVersion
github.com/cosmos/ethermintlt0.4.1

0.001 Low

EPSS

Percentile

36.1%

Related for OSV:GHSA-93P5-8FQW-WJX3