GitStock

tempoxyz/mpp-rs · Security

mpp has multiple payment bypass and griefing vulnerabilities

GHSA ID
GHSA-fxc9-7j2w-vx54
Severity
critical
Published
Updated
CVSS v4
9.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N

Description

Impact

Multiple vulnerabilities were discovered which allowed for undesirable behaviors, including:

  • Performing free tempo/charge requests
  • Replaying existing tempo/charge requests
  • Performing free tempo/session requests
  • Piggybacking off existing tempo/session channels
  • Griefing existing tempo/session channels
  • Manipulate the fee payer of a tempo/charge or tempo/session handler into paying for requests
  • Replaying existing stripe/charge requests

Patches

The issues are patched in 0.8.0

Workarounds

There are no workarounds available for these vulnerabilities

CWEs

  • CWE-288 · Authentication Bypass Using an Alternate Path or Channel
  • CWE-294 · Authentication Bypass by Capture-replay
  • CWE-345 · Insufficient Verification of Data Authenticity

References

Open GitHub