How severe is CVE-2020-20178?

CVE-2020-20178 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2020-20178 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (62nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2020-20178?

CVE-2020-20178 affects Whohas Project Whohas. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2020-20178?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2020-20178 published?

CVE-2020-20178 was published on 2021-05-24 and last updated on 2026-06-17.

CVE-2020-20178

CVE-2020-20178 is a high-severity vulnerability in Whohas Project Whohas with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 3.x base score 7.5)
CVSS v2: 5.0
EPSS exploit prediction: 1% (62nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Whohas Project Whohas
Published: 2021-05-24
Last modified: 2026-06-17

Description

Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol latest version is affected by a denial of service vulnerability in the affected payout function. Once the length of this array is too long, it will result in an exception. Attackers can make attacks by creating a series of account addresses.

Frequently asked questions

What is CVE-2020-20178?: Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol latest version is affected by a denial of service vulnerability in the affected payout function. Once the length of this array is too long, it will result in an exception. Attackers can make attacks by creating a series of account addresses.
How severe is CVE-2020-20178?: CVE-2020-20178 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2020-20178 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (62nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2020-20178?: CVE-2020-20178 affects Whohas Project Whohas. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2020-20178?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2020-20178 published?: CVE-2020-20178 was published on 2021-05-24 and last updated on 2026-06-17.

References

https://etherscan.io/address/0xe933c0cd9784414d5f278c114904f5a84b396919

Affected products (1)

cpe:2.3:a:whohas_project:whohas:-:*:*:*:*:*:*:*

More vulnerabilities in Whohas Project Whohas

CVE-2021-4258 — Low (CVSS 3.7): A vulnerability was found in whohas. It has been rated as problematic. This issue affects some unknown processing of…

All CVEs affecting Whohas Project Whohas →