CVE-2024-37154 - Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate to

CVE-2024-37154

Summary

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via `ClawbackVestingAccount`. This affects 18.1.0 and earlier.

References

https://github.com/evmos/evmos/security/advisories/GHSA-7hrh-v6wp-53vw

Vulnerable Configurations

cpe:2.3:a:evmos:evmos:*:*:*:*:*:*:*:*
cpe:2.3:a:evmos:evmos:*:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-863

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

15-10-2024 - 19:43

Published

06-06-2024 - 19:15

Last modified

15-10-2024 - 19:43