CVE-2020-15302

In Argent RecoveryManager before 0xdc350d09f71c48c5D22fBE2741e4d6A03970E192, the executeRecovery function does not require any signatures in the zero-guardian case, which allows attackers to cause a denial of service (locking) or a takeover.

• CWE-347

• https://blog.openzeppelin.com/argent-vulnerability-report/Exploit, Technical Description, Third Party Advisory
• https://blog.openzeppelin.com/argent-vulnerability-report/Exploit, Technical Description, Third Party Advisory

Published

Jun 25, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15297Insufficient validation in the Bitdefender Update Server and…9.1
• CVE-2020-15298Rejected reason: Unused CVE for 2020
• CVE-2020-15299A reflected Cross-Site Scripting (XSS) Vulnerability in the …6.1
• CVE-2020-1530An elevation of privilege vulnerability exists when Windows …7.8
• CVE-2020-15300SuiteCRM through 7.11.13 has an Open Redirect in the Documen…6.1
• CVE-2020-15301SuiteCRM through 7.11.13 allows CSV Injection via registrati…7.8
• CVE-2020-15303Infoblox NIOS before 8.5.2 allows entity expansion during an…6.5
• CVE-2020-15304An issue was discovered in OpenEXR before 2.5.2. An invalid …5.5
• CVE-2020-15305An issue was discovered in OpenEXR before 2.5.2. Invalid inp…5.5
• CVE-2020-15306An issue was discovered in OpenEXR before v2.5.2. Invalid ch…5.5
• CVE-2020-15307Nozomi Guardian before 19.0.4 allows attackers to achieve st…6.1
• CVE-2020-15308Support Incident Tracker (aka SiT! or SiTracker) 3.67 p2 all…7.2