CVE-2018-13072

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

The mintToken function of a smart contract implementation for Coffeecoin (COFFEE), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published
Jul 3, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-130737.5The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overflow that allows CVE-2018-130747.5The mintToken function of a smart contract implementation for FIBToken (FIB), an Ethereum token, has an integer overflow that allows the ownCVE-2018-130757.5The mintToken function of a smart contract implementation for Carbon Exchange Coin Token (CEC), an Ethereum token, has an integer overflow tCVE-2018-130767.5The mintToken function of a smart contract implementation for Betcash (BC), an Ethereum token, has an integer overflow that allows the ownerCVE-2018-130777.5The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-130787.5The mintToken function of a smart contract implementation for Jitech (JTH), an Ethereum token, has an integer overflow that allows the ownerCVE-2018-130797.5The mintToken function of a smart contract implementation for GoodTo (GTO), an Ethereum token, has an integer overflow that allows the ownerCVE-2018-13087.5This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlCVE-2018-130807.5The mintToken function of a smart contract implementation for Goutex (GTX), an Ethereum token, has an integer overflow that allows the ownerCVE-2018-130817.5The mintToken function of a smart contract implementation for GZS Token (GZS), an Ethereum token, has an integer overflow that allows the owCVE-2018-130827.5The mintToken function of a smart contract implementation for MODI Token (MODI), an Ethereum token, has an integer overflow that allows the CVE-2018-130837.5The mintToken function of a smart contract implementation for Plaza Token (PLAZA), an Ethereum token, has an integer overflow that allows th
CVE-2018-13072: High severity, CVSS 7.5 | Vulnix