Skip to content
Threat Feed
Subscribe

Tag

Websocket-Vulnerability

1 brief RSS
high advisory

Authorization Bypass in Klever-Go KleverUpdateAccountPermission Built-in

An authorization flaw in the Klever-Go VM allows attackers to execute an account takeover by leveraging an incorrectly validated RecipientAddr parameter during indirect smart contract calls.

klever-go blockchain smart-contract vulnerability privilege-escalation log-manipulation unauthenticated-access websocket-vulnerability
1r 2t