Beveiligingsadvies

CVE-2023-34205

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-30 00:00:00

Laatst bijgewerkt 2025-01-10 21:21:48

Toegewezen door mitre

CVSS-score 9.1

Status PUBLISHED

Beschrijving

In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).

← Alle CVE's bekijken Bekijk op cve.org ↗