OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockController allowed an actor with the executor role to escalate privileges. Further details about the vulnerability will be disclosed at a later date. As a workaround revoke the executor role from accounts not strictly under the team's control. We recommend revoking all executors that are not also proposers. When applying this mitigation, ensure there is at least one proposer and executor remaining.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HOpenzeppelin Contracts
APPOpenzeppelin3.3.0 – 3.4.2 (bez)4.0.0 – 4.3.1 (bez)
Powiązane podatności
OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts...
OpenZepplin is a library for smart contract development. In affected versions a vulnerability in TimelockContr...
OpenZeppelin Contracts is a library for secure smart contract development. The functions `ECDSA.recover` and `...
OpenZeppelin Contracts is a library for secure smart contract development. This issue concerns instances of Go...
OpenZeppelin Contracts is a library for smart contract development. Versions 4.1.0 until 4.7.1 are vulnerable ...