Code injection

2024-01-1922:15:00

PRIOn knowledge base

www.prio-n.com

consensys discovery

code injection

versions

aes/gcm nonce

exposed session key

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

20.8%

JSON

Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node’s private key isn’t compromised, only the session key generated for specific peer communication is exposed.