CVE-2020-15131

Katalog CVE

CVSS 7.5 · High EPSS 1,0%

Kerentanan Incorrect Comparison pada simpleledger slp-validate. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1 Group token type as is required by the NFT1 specification. This is fixed in version 1.2.2.

Rincian

Terbit di NVD

30 Juli 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-697: Incorrect Comparison

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/simpleledger/slp-validate.js/commit/3963cf914afae69084059b82483da916d97af65c patch · advisory pihak ketiga
• https://github.com/simpleledger/slp-validate.js/security/advisories/GHSA-6jmr-jfh7-xg3h advisory pihak ketiga