GHSA-j47c-j42c-mwqq

Dashboard / Vulnerabilities / GHSA-j47c-j42c-mwqq

GHSA-j47c-j42c-mwqq

Summary: Solana Pay Vulnerable to Weakness in Transfer Validation Logic

Details: ### Description When a Solana Pay transaction is located using a [reference key](https://github.com/solana-labs/solana-pay/blob/master/SPEC.md#reference), it may be checked to represent a transfer of the desired amount to the recipient, using the supplied [`validateTransfer` function](https://github.com/solana-labs/solana-pay/blob/master/core/src/validateTransfer.ts). An edge case regarding this mechanism could cause the validation logic to validate multiple transfers. ### Impact Most known Solana Pay point of sale applications are currently run on physical point of sale devices, which makes this issue unlikely to occur. However, there may be web-based point of sale applications using the protocol where it may be more likely to occur. ### Patches This issue has been patched as of version [`0.2.1`](https://www.npmjs.com/package/@solana/pay/v/0.2.1). Users of the Solana Pay SDK should upgrade to it.

References: https://github.com/solana-labs/solana-pay/security/advisories/GHSA-j47c-j42c-mwqq, https://nvd.nist.gov/vuln/detail/CVE-2022-35917, https://github.com/solana-labs/solana-pay/commit/ac6ce0d0a81137700874a8bf5a7caac3be999fad, https://github.com/solana-labs/solana-pay, https://github.com/solana-labs/solana-pay/blob/master/SPEC.md#reference, https://github.com/solana-labs/solana-pay/blob/master/core/src/validateTransfer.ts