CVE-2020-15130

Katalog CVE

CVSS 7.5 · High EPSS 1,0%

Kerentanan Incorrect Comparison pada simpleledger slpjs. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1 Group token type as is required by the NFT1 specification. This is fixed in version 0.27.4.

Rincian

Terbit di NVD

30 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-697: Incorrect Comparison

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/simpleledger/slpjs/commit/290c20e8bff13ac81459d43e54cac232b5e3456c patch · advisory pihak ketiga
• https://github.com/simpleledger/slpjs/security/advisories/GHSA-cc2p-4jhr-xhhx advisory pihak ketiga