Lucene search
+L

3 matches found

OSV
OSV
•added 2022/12/15 12:01 a.m.•34 views

CVE-2022-23507 Light client verification not taking into account chain ID

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...

5.4CVSS6.4AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2022/12/15 12:01 a.m.•42 views

CVE-2022-23507 Light client verification not taking into account chain ID

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...

5.4CVSS6.6AI score0.00305EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/15 12:00 a.m.•3 views

CVE-2022-23507: Improper Verification of Cryptographic Signature

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform ligh...

6.5CVSS5.8AI score0.00305EPSS
SaveExploits0References2
Rows per page
Query Builder