Описание
Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.34, anyone who uses elrond-go to process blocks (historical or actual) could encounter a MultiESDTNFTTransfer transaction like this: MultiESDTNFTTransfer with a missing function name. Basic functionality like p2p messaging, storage, API requests and such are unaffected. Version 1.3.34 contains a fix for this issue. There are no known workarounds.
Ссылки
- Third Party Advisory
- PatchThird Party Advisory
- ExploitThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.3.34 (исключая)
cpe:2.3:a:elrond:elrond_go:*:*:*:*:*:*:*:*
EPSS
Процентиль: 51%
0.00282
Низкий
7.5 High
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
elrond-go MultiESDTNFTTransfer call on a SC address with missing function name
EPSS
Процентиль: 51%
0.00282
Низкий
7.5 High
CVSS3
Дефекты
CWE-20