Cross site request forgery (csrf)

2021-10-0417:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

JSON

Lightning Labs lnd before 0.13.3-beta allows loss of funds because of dust HTLC exposure.

CPENameOperatorVersion
lightning_network_daemonlt0.11.0
lightning_network_daemoneq0.11.0
lightning_network_daemoneq0.11.0 beta-rc1
lightning_network_daemoneq0.11.0 beta-rc2
lightning_network_daemoneq0.11.0 beta-rc3
lightning_network_daemoneq0.11.0 beta-rc4
lightning_network_daemoneq0.13.3 beta-rc2
lightning_network_daemoneq0.13.2 beta
lightning_network_daemoneq0.13.1 beta-rc1
lightning_network_daemoneq0.13.1 beta-rc2

Name	Operator	Version
lightning_network_daemon	lt	0.11.0
lightning_network_daemon	eq	0.11.0
lightning_network_daemon	eq	0.11.0 beta-rc1
lightning_network_daemon	eq	0.11.0 beta-rc2
lightning_network_daemon	eq	0.11.0 beta-rc3
lightning_network_daemon	eq	0.11.0 beta-rc4
lightning_network_daemon	eq	0.13.3 beta-rc2
lightning_network_daemon	eq	0.13.2 beta
lightning_network_daemon	eq	0.13.1 beta-rc1
lightning_network_daemon	eq	0.13.1 beta-rc2

Rows per page:

1-10 of 381

References

bitcoinmagazine.com/technical/good-griefing-a-lingering-vulnerability-on-lightning-network-that-still-needs-fixing

github.com/lightningnetwork/lnd/blob/master/docs/release-notes/release-notes-0.13.3.md

github.com/lightningnetwork/lnd/releases/tag/v0.13.3-beta

lists.linuxfoundation.org/pipermail/lightning-dev/2020-May/002714.html

lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003257.html

lists.linuxfoundation.org/pipermail/lightning-dev/2021-October/003264.html