CVE-2020-5232

CVE-2020-5232 concerns the Ethereum Name Service (ENS). The vulnerability arises when an ENS domain owner can set a trapdoor that enables transferring ownership to another user and later regaining ownership without the new owner’s consent or awareness. The public records indicate a new ENS deploy...

CVE-2020-5232 Ethereum Name Service - Malicious takeover of previously owned ENS names

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry...

@archanova/contracts (>=1.0.0-beta.1, <=1.0.0-beta.3), @archanova/solidity (>=0.0.7, <=0.0.10) +13 more potentially affected by CVE-2020-5232 via @ensdomains/ens (>=0.1.1, <=0.3.11)

@ensdomains/ens NPM version =0.1.1, =1.0.0-beta.1, =0.0.7, =0.0.3, =0.0.3, =1.0.0, =0.0.2, =1.0.11, =1.1.1, =1.0.0, =3.1.0-ens-events.0, =0.6.1, =0.6.0, =0.0.8, =0.0.45 - ethregistrar 1.0.0 Source cves: CVE-2020-5232 Source advisory: OSV:GHSA-8F9F-PC5V-9R5H...