Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Theethereumlottery Subscribe
Filtered by product The Ethereum Lottery
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-15552 1 Theethereumlottery 1 The Ethereum Lottery 2019-09-16 5.0 MEDIUM 7.5 HIGH
The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" (which is private, yet predictable and readable by the eth.getStorageAt function). Therefore, it allows attackers to always win and get rewards.