Lucene search
+L

1 matches found

Code423n4
Code423n4
added 2021/09/15 12:00 a.m.13 views

manager.allowedVaults check missing for add/remove strategy

Handle 0xRajeev Vulnerability details Impact The manager.allowedVaults check is missing for add/remove strategy like how it is used in reorderStrategies. This will allow a strategist to accidentally/maliciously add/remove strategies on unauthorized vaults. Given the critical access control that i...

7AI score
SaveExploits0
Rows per page
Query Builder