Lucene search

K
osvGoogleOSV:GO-2023-1806
HistoryAug 20, 2024 - 8:31 p.m.

mx-chain-go does not treat invalid transaction with wrong username correctly in github.com/multiversx/mx-chain-go

2024-08-2020:31:32
Google
osv.dev
2
mx-chain-go
incorrect handling
invalid transaction
wrong username
github.com/multiversx/mx-chain-go
software

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

6.7

Confidence

Low

mx-chain-go does not treat invalid transaction with wrong username correctly in github.com/multiversx/mx-chain-go

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

AI Score

6.7

Confidence

Low

Related for OSV:GO-2023-1806