Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/08/11 7:0 p.m.24 views

OpenZeppelin Contracts vulnerable to Improper Escaping of Output

Impact OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 4.0.0 and prior to version 4.9.3, contracts using ERC2771Context along with a custom trusted forwarder may see msgSender return address0 in calls that originate from the forwarder with calldata...

5.3CVSS6.8AI score0.00611EPSS
SaveExploits0References9Affected Software2
Positive Technologies
Positive Technologies
added 2023/08/10 12:0 a.m.12 views

PT-2023-27209 · Openzeppelin · Openzeppelin Contracts

Name of the Vulnerable Software and Affected Versions: OpenZeppelin Contracts versions 4.0.0 through 4.9.3 Description: OpenZeppelin Contracts is a library for secure smart contract development. Contracts using ERC2771Context along with a custom trusted forwarder may see msgSender return address0...

5.3CVSS5AI score0.00611EPSS
SaveExploits0References16
Rows per page
Query Builder