PT-2023-24758

Name of the Vulnerable Software and Affected Versions OpenZeppelin Contracts versions 4.3.0 through 4.9.0 Description The issue allows an attacker to become the proposer and gain the ability to cancel a proposal by frontrunning its creation. This can be done repeatedly to prevent a proposal from...

CVE-2023-34234: Missing Authorization

OpenZeppelin Contracts is a library for smart contract development. By frontrunning the creation of a proposal, an attacker can become the proposer and gain the ability to cancel it. The attacker can do this repeatedly to try to prevent a proposal from being proposed at all. This impacts the...