Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39279
HistoryFeb 15, 2023 - 7:36 a.m.

Improper Verification Of Cryptographic Signature

2023-02-1507:36:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
cryptographic signature
impersonation
account
confidential data
keccak
sequencer
vulnerability
security issue

0.001 Low

EPSS

Percentile

26.7%

openzeppelin_cairo_contracts is vulnerable to Improper Verification of Cryptographic Signature. A malicious user is able to bypass signature validation to impersonate an instance of an account and gain access to confidential user data, because is_valid_eth_signature is missing a call to finalize_keccak after calling verify_eth_signature, which makes it vulnerable to a malicious sequencer.

0.001 Low

EPSS

Percentile

26.7%

Related for VERACODE:39279