PT-2021-23970
CVE-2021-43839
·
تاريخ النشر
2021-12-21
·
تاريخ التحديث
2022-01-06
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions:
Cronos versions prior to v0.6.5
Description:
The issue allows an attacker to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted
MsgEthereumTx. User funds and balances are safe.Recommendations:
For Cronos versions prior to v0.6.5, upgrade to Cronos v0.6.5 at the earliest possible convenience.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾