CVE-2018-17111

9.8 criticalEPSS 1.2%

The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use this onlyOwner modifier, because the comparison between msg.sender and owner is incorrect.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 68% of CVEs (scores of 2026-10-31)
Published: 2018-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

coinlancer:coinlancer

References

https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17111
https://github.com/TEAM-C4B/CVE-LIST/tree/master/CVE-2018-17111

Check your stack JSON