Unrated severityNVD Advisory· Published Jun 17, 2024· Updated Aug 2, 2024

Evmos is missing create validator check

CVE-2024-37159

Description

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0.

Affected products

Evmos/Evmosllm-fuzzy2 versions
<18.0.0+ 1 more
- (no CPE)range: <18.0.0
- (no CPE)range: < 18.0.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcbmitrex_refsource_MISC
github.com/evmos/evmos/security/advisories/GHSA-pxv8-qhrh-jc7vmitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000