Логотип exploitDog
bind:CVE-2023-34234
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-34234

Количество 2

Количество 2

nvd логотип

CVE-2023-34234

больше 2 лет назад

OpenZeppelin Contracts is a library for smart contract development. By frontrunning the creation of a proposal, an attacker can become the proposer and gain the ability to cancel it. The attacker can do this repeatedly to try to prevent a proposal from being proposed at all. This impacts the `Governor` contract in v4.9.0 only, and the `GovernorCompatibilityBravo` contract since v4.3.0. This problem has been patched in 4.9.1 by introducing opt-in frontrunning protection. Users are advised to upgrade. Users unable to upgrade may submit the proposal creation transaction to an endpoint with frontrunning protection as a workaround.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-5h3x-9wvq-w4m2

больше 2 лет назад

OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-34234

OpenZeppelin Contracts is a library for smart contract development. By frontrunning the creation of a proposal, an attacker can become the proposer and gain the ability to cancel it. The attacker can do this repeatedly to try to prevent a proposal from being proposed at all. This impacts the `Governor` contract in v4.9.0 only, and the `GovernorCompatibilityBravo` contract since v4.3.0. This problem has been patched in 4.9.1 by introducing opt-in frontrunning protection. Users are advised to upgrade. Users unable to upgrade may submit the proposal creation transaction to an endpoint with frontrunning protection as a workaround.

CVSS3: 5.3
0%
Низкий
больше 2 лет назад
github логотип
GHSA-5h3x-9wvq-w4m2

OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning

CVSS3: 5.3
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу