PT-2023-12320
CVE-2021-37492
·
Published
2023-02-07
·
Updated
2025-03-25
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Ravencoin Core versions 4.3.2.1 and earlier
Description
An issue in the src/wallet/wallet.cpp file allows attackers to view sensitive information via the
CWallet::CreateTransactionAll() function.Recommendations
For Ravencoin Core versions 4.3.2.1 and earlier, consider restricting access to sensitive information until a patch is available.
As a temporary workaround, consider disabling the
CWallet::CreateTransactionAll() function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾