CVE-2024-37154

Published Jun 6, 2024

Last updated 3 months ago

CVSS medium 5.3

Overview

Description: Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via `ClawbackVestingAccount`. This affects 18.1.0 and earlier.
Source: security-advisories@github.com
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity: MEDIUM

Weaknesses

security-advisories@github.com: CWE-285
nvd@nist.gov: CWE-863

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:evmos:evmos:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1A616824-97B4-4783-9D1D-E06E56D62E6E"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References