CVE-2022-311536.5MediumCWE-664

CVE-2022-31153: OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli

OpenZeppelin · cairo-contracts

Affected: OpenZeppelin cairo-contracts · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.5%probability of exploitation in the next 30 days

73rd percentile

050100

Higher than 73% of scored CVEs

6.5MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

OpenZeppelin Contracts for Cairo is a library for contract development written in Cairo for StarkNet, a decentralized ZK Rollup. Version 0.2.0 is vulnerable to an error that renders account contracts unusable on live networks. This issue affects all accounts (vanilla and ethereum flavors) in the v0.2.0 release of OpenZeppelin Contracts for Cairo, which are not whitelisted on StarkNet mainnet. Only goerli deployments of v0.2.0 accounts are affected. This faulty behavior is not observed in StarkNet's testing framework. This bug has been patched in v0.2.1.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

OpenZeppelin · cairo-contracts= 0.2.0

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Improper Control of a Resource Through its Lifetime · Other weaknesses
Vendor: OpenZeppelin
Published: July 2022
Band: Possible (1 to 10%), July 2022

CoverageNo articles yet

No CyberSIXT article names CVE-2022-31153 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.