Vulnerabilities (CVE)

Filtered by vendor Ens.domains Subscribe
Filtered by product Ethereum Name Service
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-5232 1 Ens.domains 1 Ethereum Name Service 2020-02-06 4.9 MEDIUM 8.7 HIGH
A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry.