Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2021/07/02 7:20 p.m.91 views

Utils.readChallengeTx does not verify the server account signature

The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the serverAccountID has signed the transaction. The function does not verify that the server has signed...

6.5CVSS2.2AI score0.00514EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2021/07/02 7:20 p.m.20 views

GHSA-6CGH-HJPW-Q3GQ Utils.readChallengeTx does not verify the server account signature

The Utils.readChallengeTx function used in SEP-10 Stellar Web Authentication states in its function documentation that it reads and validates the challenge transaction including verifying that the serverAccountID has signed the transaction. The function does not verify that the server has signed...

6.5CVSS6.3AI score0.00514EPSS
SaveExploits0References4
Rows per page
Query Builder