| Название | NutzBoot project (Nutz community) NutzBoot (Web3j starter + demo module) NutzBoot 2.6.0-SNAPSHOT Improper Access Control (Unauthenticated transaction API) |
|---|
| Описание | The same Web3j demo module that loads wallet credentials also provides a convenience endpoint to trigger transfers. The method performs the following steps:
Accepts from and to path segments and a wei query parameter.
Ensures the amount is 0.01–100 ether.
Fetches the Web3jAccount matching the from name and obtains its stored password.
Calls web3jAdmin.personalSendTransaction(...), which unlocks the account and sends the transaction.
No user identity is checked, and the route is accessible with an ordinary GET request. Consequently, anyone can spend the funds of any configured account by making a single HTTP call. |
|---|
| Источник | ⚠️ https://github.com/Xzzz111/exps/blob/main/archives/nutzboot-UnauthorizedTransfer-1/report.md |
|---|
| Пользователь | sh7err03 (UID 92418) |
|---|
| Представление | 10.11.2025 11:53 (11 месяцы назад) |
|---|
| Модерация | 30.11.2025 15:13 (20 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 333816 [nutzam NutzBoot до 2.6.0-SNAPSHOT Transaction API EthModule.java from/to/wei эскалация привилегий] |
|---|
| Баллы | 20 |
|---|