cosmos github.com/cosmos/ethermint vulnerabilities

Latest cosmos github.com/cosmos/ethermint CVEs

Newest publication first

1. CVE-2021-25835 Authentication bypass by capture-replay in github.com/cosmos/ethermint

   Published 2021-02-08

   High·CVSS 7.5 EPSS 1.3%

   Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature schemes with ethereum for compatibility, a verified signature in ethereum is still valid in ethermint with...

2. CVE-2021-25834 Authentication bypass by capture-replay in github.com/cosmos/ethermint

   Published 2021-02-08

   High·CVSS 7.5 EPSS 1.2%

   Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.