-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stemmed from the nonce increment logic in relayed transaction handling. The key vulnerable function was removeValueAndConsumedFeeFromUser which contained userAcnt.IncreaseNonce(1) without error checks. The commit diff shows this was modified to use shouldIncreaseNonce which adds error type checks. The processUserTx function was also involved as it triggered this logic. Pre-patch versions lacked the RelayedNonceFixEnableEpoch flag checks and error analysis demonstrated in the fixed code.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/multiversx/mx-chain-go | go | < 1.4.17 | 1.4.17 |
GoGoOngoing coverage of React2Shell