A lack of target address verification in the selfdestructs() function of ICOVO 1.0 allows attackers to steal tokens from victim users via a crafted script.
References
Link | Resource |
---|---|
https://github.com/OSUPlayer/CVEs/blob/master/Suicidal/2019-07-09-02.md | Exploit Third Party Advisory |
Configurations
Information
Published : 2021-09-07 15:15
Updated : 2021-09-14 07:54
NVD link : CVE-2020-19768
Mitre link : CVE-2020-19768
JSON object : View
CWE
CWE-345
Insufficient Verification of Data Authenticity
Products Affected
tokensale_project
- tokensale