Threats tagged 'ghsa-6jp4-8v48-cc5v'

Electrum versions prior to 4.8.3 are vulnerable to a malicious server attack where the server can replace a just-broadcast transaction with a conflicting transaction containing the attacker's output address. This attack exploits the client's trust in the server's mempool data and the lack of signature verification for unconfirmed transactions, potentially tricking users into fee-bumping a fraudulent transaction and losing funds. The issue is fixed in Electrum 4.8.3 by verifying signatures of wallet-owned inputs in mempool transactions before adding them to the local history.