CVE-2022-23507

Tendermint is a high-performance blockchain consensus engine for Byzantine fault tolerant applications. Versions prior to 0.28.0 contain a potential attack via Improper Verification of Cryptographic Signature, affecting anyone using the tendermint-light-client and related packages to perform light client verification (e.g. IBC-rs, Hermes). The light client does not check that the chain IDs of the trusted and untrusted headers match, resulting in a possible attack vector where someone who finds a header from an untrusted chain that satisfies all other verification conditions (e.g. enough overlapping validator signatures) could fool a light client. The attack vector is currently theoretical, and no proof-of-concept exists yet to exploit it on live networks. This issue is patched in version 0.28.0. There are no workarounds.

• CWE-347

• https://github.com/informalsystems/tendermint-rs/security/advisories/GHSA-xqqc-c5gw-c5r5Third Party Advisory
• https://github.com/informalsystems/tendermint-rs/security/advisories/GHSA-xqqc-c5gw-c5r5Third Party Advisory

Published

Dec 15, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-23501TYPO3 is an open source PHP based web content management sys…6.5
• CVE-2022-23502TYPO3 is an open source PHP based web content management sys…5.4
• CVE-2022-23503TYPO3 is an open source PHP based web content management sys…8.8
• CVE-2022-23504TYPO3 is an open source PHP based web content management sys…4.9
• CVE-2022-23505Passport-wsfed-saml2 is a ws-federation protocol and SAML2 t…7.5
• CVE-2022-23506Spinnaker is an open source, multi-cloud continuous delivery…7.5
• CVE-2022-23508Weave GitOps is a simple open source developer platform for …7.8
• CVE-2022-23509Weave GitOps is a simple open source developer platform for …6
• CVE-2022-2351The Post SMTP Mailer/Email Log WordPress plugin before 2.1.4…4.8
• CVE-2022-23510cube-js is a headless business intelligence platform. In ver…8.8
• CVE-2022-23511A privilege escalation issue exists within the Amazon CloudW…6.8
• CVE-2022-23512MeterSphere is a one-stop open source continuous testing pla…8.1