Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Cashu NUTs 安全漏洞
Vulnerability Description
Cashu NUTs是Cashu开源的一个Cashu协议规范。 Cashu NUTs 0.18.0之前版本存在安全漏洞，该漏洞源于未验证preimage大小，可能导致攻击者填充mint的数据库和磁盘。
CVSS Information
N/A
Vulnerability Type
N/A