Lucene search

Veracode Vulnerability DatabaseVERACODE:46627

HistoryApr 26, 2024 - 5:06 a.m.

Improper Input Validation

2024-04-2605:06:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

improper input validation

memory handling

storage arguments

incorrect values

logging vulnerability

vyper software

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

vyper is vulnerable to Improper Input Validation. The vulnerability is caused by improper handling of memory or storage arguments in the raw_log builtin, which results in incorrect values being logged when these arguments are used as topics.

CPENameOperatorVersion
vyperle0.4.0rc2
vyperle0.4.0rc2

CPE	Name	Operator	Version
	vyper	le	0.4.0rc2
	vyper	le	0.4.0rc2

References

github.com/advisories/GHSA-xchq-w5r3-4wg3

github.com/vyperlang/vyper/security/advisories/GHSA-xchq-w5r3-4wg3

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for VERACODE:46627