GCVE - cpe:2.3:a:gve:globalvillage_ecosystem:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gve:globalvillage_ecosystem:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Gve (`5b02a9d9-51c4-588d-985e-7a57f7f2be84`)
Product	Globalvillage Ecosystem (`06fb89b4-9877-5919-8309-2b9afc317e9c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-12702`	vulnerable	2026-06-08 05:10:41.896527	Details available The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability." Published: 2018-06-25T10:00:00.000Z Updated: 2024-08-05T08:45:02.243Z Open on db.gcve.eu Reference links https://huobiglobal.zendesk.com/hc/en-us/articles/360000110521-HADAX-Suspends-18T-and-GVE-Deposits-and-Withdrawals https://peckshield.com/2018/06/23/evilReflex/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.