5 matches found
Insecure Signature Verification
stellar-sdk uses insecure signature verification.The function Utils.readChallengeTx fails to verify that the transactions are signed by serverAccountID, allowing invalid challenge transactions as valid ones...
6.5CVSS3.4AI score0.00514EPSS
SaveExploits0References3Affected Software1
20