Skip to content
Threat Feed
Subscribe

Product

Klever-Go (<= 1.7.19)

1 brief RSS
high advisory

Authorization Bypass in Klever-Go KleverUpdateAccountPermission Built-in

An authorization flaw in the Klever-Go VM allows attackers to execute an account takeover by leveraging an incorrectly validated RecipientAddr parameter during indirect smart contract calls.

klever-go blockchain smart-contract vulnerability privilege-escalation log-manipulation unauthenticated-access websocket-vulnerability
1r 2t