Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Cryptosaga Subscribe
Filtered by product Cryptosaga
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12975 1 Cryptosaga 1 Cryptosaga 2018-12-20 5.0 MEDIUM 7.5 HIGH
The random() function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable (which can be read with a getStorageAt call). Therefore, attackers can precompute the random number and manipulate the game (e.g., get powerful characters or get critical damages).