github.com/russellhaering/goxmldsig

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2020-15216

Signature Validation Bypass in goxmldsig

In goxmldsig (XML Digital Signatures implemented in pure Go) before version 1.1.0, with a carefully crafted XML file, an attacker can completely bypass signature validation and pass off an altered file as a signed one. A patch is available, all users of goxml…

russellhaering goxmldsig github.com/russellhaering/goxmldsig golang-github-russellhaering-goxmldsig Debian Ubuntu Go

Sep 29, 2020