1 matches found
Can access cards of other markets
Handle gpersoon Vulnerability details Impact Within RCMarket.sol the functions ownerOf and onlyTokenOwner do not check if the cardId/token is smaller than numberOfCards. So it's possible to supply a larger number and access cards of other markets. The most problematic seems to be upgradeCard. Her...