7 matches found
CVE-2021-32738
js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...
Improper Authentication
Overview The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the serverAccountID has signed the transaction. The function does not verify that the server ha...
@1llet.xyz/erc4337-gasless-sdk (>=0.4.10 <=0.4.73), @adebaraayomide/synchro_sdk (>=0.0.3 <=0.1.0-synchro-sdk) +209 more potentially affected by CVE-2021-32738 via stellar-sdk (>=0.10.0 <=7.0.0)
stellar-sdk NPM version =0.10.0, =0.4.10, =0.0.3, =3.8.0, =1.0.0, =0.7.0, =1.0.0, =0.0.0-semantic-release-managed, =0.0.0-semantic-release-managed, =0.0.0-semantic-release-managed, =0.0.0-semantic-release-managed, =2.0.73-alpha.212 and more Source cves: CVE-2021-32738 Source advisory:...
CVE-2021-32738
js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...
CVE-2021-32738
js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...
CVE-2021-32738
CVE-2021-32738 affects the js-stellar-sdk library used to interact with Stellar Horizon. The vulnerability lies in Utils.readChallengeTx, which, before version 8.2.3, did not verify that the server signature was present on the challenge transaction; however, signature verification via Utils.verif...
CVE-2021-32738 Utils.readChallengeTx does not verify the server account signature
js-stellar-sdk is a Javascript library for communicating with a Stellar Horizon server. The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the...