2 matches found
CVE-2020-19766
The time check operation of PepeAuctionSale 1.0 can be rendered ineffective by assigning a large number to the duration variable, compromising access control to the application...
CVE-2020-19766
CVE-2020-19766 concerns PepeAuctionSale 1.0, where the time check can be bypassed by assigning a large value to the internal _duration variable, compromising access control. The connected sources consistently describe this logic-flaw in PepeAuctionSale leading to elevated or unrestricted access, ...