CVE-2023-30543
on github
Published
Severity
CVSS v3:
5.7 MEDIUM
CVSS v2:
N/A
Description
@web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the connection flow. This means that the value of `chainId` returned by `useWeb3React()` may be incorrect. In an application, this means that any data derived from `chainId` could be incorrect. For example, if a swapping application derives a wrapped token contract address from the `chainId` *and* a user has changed chains as part of their connection flow the application could cause the user to send funds to the incorrect address when wrapping. This issue has been addressed in PR #749 and is available in updated npm artifacts. There are no known workarounds for this issue. Users are advised to upgrade.
References
Configurations
| CPE23 | Version Start | Version End | Exact Version |
|---|---|---|---|
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.30:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.30 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.31:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.31 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.32:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.32 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.33:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.33 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.34:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.34 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.35:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.35 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.36:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.36 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.27:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.27 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.28:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.28 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.29:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.29 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.0:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.0 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.1:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.1 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.2:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.2 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.3:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.3 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.4:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.4 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.5:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.5 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.6:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.6 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.7:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.7 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.8:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.8 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.9:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.9 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.10:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.10 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.11:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.11 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.12:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.12 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.13:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.13 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.14:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.14 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.15:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.15 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.16:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.16 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.17:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.17 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.18:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.18 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.19:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.19 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.20:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.20 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.21:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.21 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.22:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.22 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.23:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.23 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.24:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.24 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.25:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.25 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:8.0.26:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.26 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:7.0.1:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.1 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:7.0.2:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.2 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:7.0.0:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.0 |
| cpe:2.3:a:uniswap:web3-react_walletconnect:*:*:*:*:*:node.js:*:* | 6.0.0 (including) | 6.2.14 (including) | * |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.27:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.27 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.28:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.28 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.29:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.29 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.0:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.0 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.1:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.1 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.2:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.2 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.3:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.3 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.4:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.4 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.5:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.5 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.6:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.6 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.7:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.7 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.8:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.8 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.9:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.9 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.10:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.10 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.11:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.11 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.12:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.12 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.13:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.13 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.14:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.14 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.15:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.15 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.16:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.16 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.17:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.17 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.18:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.18 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.19:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.19 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.20:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.20 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.21:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.21 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.22:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.22 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.23:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.23 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.24:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.24 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.25:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.25 |
| cpe:2.3:a:uniswap:web3-react_metamask:8.0.26:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.26 |
| cpe:2.3:a:uniswap:web3-react_metamask:*:*:*:*:*:node.js:*:* | 6.0.0 (including) | 6.2.14 (including) | * |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.0:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.0 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.1:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.1 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.2:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.2 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.3:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.3 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.4:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.4 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.5:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.5 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.6:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.6 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.7:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.7 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.8:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.8 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.9:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.9 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.10:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.10 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.11:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.11 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.12:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.12 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.13:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.13 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.14:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.14 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.15:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.15 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.16:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.16 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.17:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.17 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.18:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.18 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.19:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.19 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.20:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.20 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.21:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.21 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.22:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.22 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.23:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.23 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.24:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.24 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.25:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.25 |
| cpe:2.3:a:uniswap:web3-react_eip1193:8.0.26:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.26 |
| cpe:2.3:a:uniswap:web3-react_eip1193:7.0.1:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.1 |
| cpe:2.3:a:uniswap:web3-react_eip1193:7.0.2:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.2 |
| cpe:2.3:a:uniswap:web3-react_eip1193:7.0.0:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.0 |
| cpe:2.3:a:uniswap:web3-react_eip1193:*:*:*:*:*:node.js:*:* | 6.0.0 (including) | 6.2.14 (including) | * |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.22:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.22 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.23:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.23 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.24:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.24 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.25:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.25 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.26:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.26 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.27:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.27 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.28:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.28 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.29:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.29 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.30:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.30 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.31:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.31 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.32:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.32 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.33:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.33 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:8.0.34:beta0:*:*:*:node.js:*:* | n/a | n/a | 8.0.34 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:7.0.1:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.1 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:7.0.2:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.2 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:7.0.0:alpha0:*:*:*:node.js:*:* | n/a | n/a | 7.0.0 |
| cpe:2.3:a:uniswap:web3-react_coinbase-wallet:*:*:*:*:*:node.js:*:* | 6.0.0 (including) | 6.2.14 (including) | * |