1 result · Clear filters · Feed
-
Low 2.1
Botan: directoryName nameConstraint bypass via multi-AVA RDN flattening in matches_dn
Botan is a C++ cryptography library. Prior to 3.13.0, Botan's X.509 Distinguished Name decoder flattens the Attribute-Value Assertions in each Relative Distinguished Name and loses multi-value RDN grouping before DN name-constraint enforcement. An attacker co…