CPE Details
goxmldsig Project goxmldsig
-
2020-08-24
13h30 +00:00
13h30 +00:00
2020-08-24
13h30 +00:00
13h30 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:goxmldsig_project:goxmldsig:-:*:*:*:*:*:*:*
Informations
Vendor
goxmldsig_projectProduct
goxmldsigVersion
-Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxmldsig should upgrade to at least revision f6188febf0c29d7ffe26a0436212b19cb9615e64 or version 1.1.0 | 6.5 |
Moyen |
||
| This affects all versions of package github.com/russellhaering/goxmldsig. There is a crash on nil-pointer dereference caused by sending malformed XML signatures. | 7.5 |
Haute |
