Lucene search
+L

1 matches found

OSV
OSV
added 2023/02/02 4:59 p.m.61 views

GHSA-626Q-V9J4-MCP4 OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature

Cause isvalidethsignature is missing a call to finalizekeccak after calling verifyethsignature. Impact As a result, any contract using isvalidethsignature from the account library such as the EthAccount preset is vulnerable to a malicious sequencer. Specifically, the malicious sequencer would be...

6CVSS5.7AI score0.0022EPSS
SaveExploits0References5
Rows per page
Query Builder