CVE-2023-34205

9.1CRITICAL

In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrappin

게시됨: 5/30/2023업데이트됨: 1/10/2025
NVD에서 보기MITRE에서 보기

설명

In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).

AI 분석AI 기반

영향받는 제품

moovsignedxml
1.0.0

참조