CVE-2020-15131

Source
https://nvd.nist.gov/vuln/detail/CVE-2020-15131
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-15131.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-15131
Aliases
Related
Published
2020-07-30T15:15:13Z
Modified
2025-01-08T10:27:28.029336Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

In SLP Validate (npm package slp-validate) before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1 Group token type as is required by the NFT1 specification. This is fixed in version 1.2.2.

References

Affected packages

Git / github.com/simpleledger/slp-validate

Affected ranges

Type
GIT
Repo
https://github.com/simpleledger/slp-validate
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Type
GIT
Repo
https://github.com/simpleledger/slp-validate.js
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

1.*

1.0.0
1.0.1
1.1.0
1.1.1
1.1.2
1.2.1