Количество 2
Количество 2
CVE-2023-34205
больше 2 лет назад
In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).
CVSS3: 9.1
EPSS: Низкий
GHSA-jqvr-j2vg-gjrv
больше 2 лет назад
Signature validation bypass in github.com/moov-io/signedxml
CVSS3: 9.1
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-34205 In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW). | CVSS3: 9.1 | 0% Низкий | больше 2 лет назад |
| GHSA-jqvr-j2vg-gjrv Signature validation bypass in github.com/moov-io/signedxml | CVSS3: 9.1 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу
20