CVE-2024-37159CWE-285

Evmos is missing create validator check

Low · published June 17, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
23.0
In the wild
Unconfirmed
What it is

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00313 · 23.0th percentile
Weakness
CWE-285 · Improper Authorization
Published
2024-06-17T14:03Z
EPSS history
Timeline
  • 17 JUN 14:03Z
    Evmos is missing create validator check
    cvelistv5