| 제목 | NutzBoot project (Nutz community) NutzBoot (Web3j starter + demo module) NutzBoot 2.6.0-SNAPSHOT Improper Access Control (Unauthenticated transaction API) |
|---|
| 설명 | The same Web3j demo module that loads wallet credentials also provides a convenience endpoint to trigger transfers. The method performs the following steps:
Accepts from and to path segments and a wei query parameter.
Ensures the amount is 0.01–100 ether.
Fetches the Web3jAccount matching the from name and obtains its stored password.
Calls web3jAdmin.personalSendTransaction(...), which unlocks the account and sends the transaction.
No user identity is checked, and the route is accessible with an ordinary GET request. Consequently, anyone can spend the funds of any configured account by making a single HTTP call. |
|---|
| 원천 | ⚠️ https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-UnauthorizedTransfer-1/report.md |
|---|
| 사용자 | sh7err03 (UID 92418) |
|---|
| 제출 | 2025. 11. 10. AM 11:53 (11 개월 ago) |
|---|
| 모더레이션 | 2025. 11. 30. PM 03:13 (20 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 333816 [nutzam NutzBoot 까지 2.6.0-SNAPSHOT Transaction API EthModule.java from/to/wei 권한 상승] |
|---|
| 포인트들 | 20 |
|---|