Vulnerabilities > CVE-2020-5232 - Unspecified vulnerability in Ens.Domains Ethereum Name Service 0.0.21/0.0.22

047910
CVSS 8.7 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
low complexity
ens-domains
NVD
Published: 2020-01-31
Updated: 2024-11-21

Summary

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry.

Vulnerable Configurations

Part Description Count
Application
Ens.Domains
3

References