CVE-2020-15130

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-15130
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15130.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-15130
Aliases
Published
2020-07-30T15:15:13.057Z
Modified
2026-07-09T01:30:44.524487Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

In SLPJS (npm package slpjs) before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1 Group token type as is required by the NFT1 specification. This is fixed in version 0.27.4.

References

Affected packages

Git / github.com/simpleledger/slpjs

Affected ranges

Type
GIT
Repo
https://github.com/simpleledger/slpjs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
66304a92a2569c9345a8c452440f984877372e11
Fixed
290c20e8bff13ac81459d43e54cac232b5e3456c
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "0.27.4"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:simpleledger:slpjs:*:*:*:*:*:node.js:*:*"
}

Affected versions

0.*
0.10.2
0.12.2
0.14.0
0.15.13
0.15.3
0.16.0
0.16.1
0.16.2
0.16.3
0.17.0
0.18.0
0.18.2
0.21.1
0.21.4
0.22.0
0.22.1
0.22.2
0.22.3
0.23.0
0.23.2
0.23.3
0.24.0
0.24.3
0.25.3
0.26.0
0.27.2
0.27.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15130.json"