Lucene search
Veracode Vulnerability DatabaseVERACODE:36557HistoryAug 02, 2022 - 5:13 a.m.
Weak Transfer Logic
2022-08-0205:13:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
0.001 Low
EPSS
Percentile
33.8%
@solana/pay adopts a weak transfer logic. It doesn’t properly check if a transaction is valid Solana Pay transfer, ending up validating multiple transfers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| @solana/pay | le | 0.2.0 | |
| @solana/pay | le | 0.2.0 |
References
Related
nvd
nvd
CVE-2022-35917
2022-08-01 22:15:10
cvelist
cvelist
CVE-2022-35917 Weakness in Transfer Validation Logic in @solana/pay
2022-08-01 21:10:11
cve
cve
CVE-2022-35917
2022-08-01 22:15:10
prion
prion
Design/Logic Flaw
2022-08-01 22:15:00
osv
osv
Solana Pay Vulnerable to Weakness in Transfer Validation Logic
2022-08-06 05:39:18
CVE-2022-35917
2022-08-01 22:15:10
github
github
Solana Pay Vulnerable to Weakness in Transfer Validation Logic
2022-08-06 05:39:18