Submitted by JMukesh, also found by 0xRajeev
In require() of function addTemplate(bytes32 name, address template), we check if a given name has been allotted or not. But, it misses checking the second parameter of function that is template. Without checking template address, an unintended address can be set for given name.
Recommend adding one more condition in require() for checking of template address.
xyz-ctrl (Visor) acknowledged:
ztcrypto (Visor) commented:
