CVE-2019-20809

The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the…

published June 3, 2020

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00882 · 58.7th percentile
Published
2020-06-03T16:54Z
EPSS history
Timeline
  • 03 JUN 16:54Z
    The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the…
    cvelistv5