Security Advisory
CVE-2019-20809
7.5
HIGH
Vulnerability Description
The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings.
Published Date
June 3, 2020
Official Source
NIST NVD Advisory