The vulnerability of the setPrice function in the PriceOracle.sol component of the decentralized price data system, Compound Price Oracle, allows a attacker to increase their privileges.

The vulnerability of the setPrice function in the PriceOracle.sol component of the decentralized price data system Compound Price Oracle is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

CVE-2019-20809: Undefined Security Weakness

The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...

PT-2018-3542

Name of the Vulnerable Software and Affected Versions: Compound Price Oracle versions 1.0 through 2.0 Description: The issue concerns the price oracle in Compound Finance's Compound Price Oracle, where the setPrice function in PriceOracle.sol lacks sufficient input validation. This allows a price...