Privilege Escalation

2021-12-2202:22:11

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

31.3%

JSON

github.com/crypto-org-chain/cronos is vulnerable to privilege escalation. An attacker can take transaction fees from Cosmos SDK’s FeeCollector for the current block by sending a custom-crafted MsgEthereumTx.

CPENameOperatorVersion
github.com/crypto-org-chain/cronoslev0.6.1
github.com/tharsis/ethermintlev0.7.2
github.com/tharsis/ethermintlev0.9.0
github.com/tharsis/evmoslev0.4.2
github.com/crypto-org-chain/cronoslev0.6.1
github.com/tharsis/ethermintlev0.7.2
github.com/tharsis/ethermintlev0.9.0
github.com/tharsis/evmoslev0.4.2

Name	Operator	Version
github.com/crypto-org-chain/cronos	le	v0.6.1
github.com/tharsis/ethermint	le	v0.7.2
github.com/tharsis/ethermint	le	v0.9.0
github.com/tharsis/evmos	le	v0.4.2
github.com/crypto-org-chain/cronos	le	v0.6.1
github.com/tharsis/ethermint	le	v0.7.2
github.com/tharsis/ethermint	le	v0.9.0
github.com/tharsis/evmos	le	v0.4.2