CVE-2020-11072

Name: CVE-2020-11072
Creator: NVD / NIST
Published: 2020-05-12T01:15:11.213+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

HIGHCVSS 8.6/10EPSS 1.04%

Last modified Jun 17, 2026

CVE-2020-11072 is a high-severity vulnerability rated 8.6/10 on the CVSS scale. In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. EPSS estimates a 1.04% chance of exploitation in the next 30 days.

Description

In SLP Validate (npm package slp-validate) before version 1.2.1, users could experience false-negative validation outcomes for MINT transaction operations. A poorly implemented SLP wallet could allow spending of the affected tokens which would result in the destruction of a user's minting baton. This has been fixed in slp-validate in version 1.2.1. Additonally, slpjs version 0.27.2 has a related fix under related CVE-2020-11071.

Metrics

CVSS 3.1

8.6/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

EPSS Probability

1.04%

59.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Simpleledger	Slp-Validate	< 1.2.1

References

https://github.com/simpleledger/slp-validate/commit/cde95c0c6470dceb4f023cd462f904135ebd73e7Patch, Third Party Advisory
https://github.com/simpleledger/slp-validate/security/advisories/GHSA-4w97-57v2-3w44Third Party Advisory
https://github.com/simpleledger/slp-validate/commit/cde95c0c6470dceb4f023cd462f904135ebd73e7Patch, Third Party Advisory
https://github.com/simpleledger/slp-validate/security/advisories/GHSA-4w97-57v2-3w44Third Party Advisory

Timeline

Published: May 12, 2020
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-11072?

How severe is CVE-2020-11072?

CVE-2020-11072 has a CVSS score of 8.6/10 (HIGH severity). The EPSS model estimates a 1.04% probability of exploitation in the next 30 days.

How do I fix CVE-2020-11072?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-11072?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST