Unix time unlock_time values have dangerous validation rules enabling a number of exploits

业务逻辑 / 业务逻辑错误 / #854726

厂商

Monero

严重程度

中危 · CVSS 8.3

赏金

—

弱点

业务逻辑错误

研究员

@thecharlatan

披露日期

2021-09-12

资产

—

CVE

—

该报告还没有中文解读。

*Initially found by TheCharlatan, discussed with and expanded on by Isthmus, impacts all releases of monero and monero wallets*