GSD-2022-1000077
- Source
- https://data.gsd.id/GSD-2022-1000077
- Import Source
- https://github.com/cloudsecurityalliance/gsd-database/blob/main/2022/1000xxx/GSD-2022-1000077.json
- JSON Data
- https://api.osv.dev/v1/vulns/GSD-2022-1000077
- Withdrawn
- 2023-03-14T07:04:18.328829Z
- Published
- 2022-02-18T03:50:18.115366Z
- Modified
- 2023-03-14T07:04:18.328829Z
- Summary
- CWE-749 in Dragos version all versions
- Details
-
In RigoBlock Dragos, all versions as of 2022-02-17 and later (until a major protocol update is accomplished) contain an exposed function (CWE-749), specifically setMultipleAllowances() which was not set to onlyOwner. The setMultipleAllowances() function can be to manipulate tokens with the contract.
- References