Lucene search
GoogleOSV:GO-2022-0409HistoryJul 01, 2022 - 8:08 p.m.
GO-2022-0409
2022-07-0120:08:30
Google
osv.dev
12
attacker
signature validation
xml file
altered file
software
EPSS
0.004
Percentile
73.7%
An attacker can create an XML file which completely bypasses signature validation,
passing off an altered file as a signed one.
Related
osv
osv
CVE-2020-26290
2020-12-28 20:15:12
GO-2021-0056
2021-04-14 20:04:52
cvelist
cvelist
CVE-2020-26290 Critical security issues in XML encoding in Dex
2020-12-28 19:15:17
CVE-2020-27847
2021-05-28 10:20:35
CVE-2020-15216 Signature Validation Bypass in goxmldsig
2020-09-29 16:00:18
nvd
nvd
prion
prion
Design/Logic Flaw
2020-12-28 20:15:00
Design/Logic Flaw
2021-05-28 11:15:00
Design/Logic Flaw
2020-09-29 16:15:00
cve
cve
github
github
Authentication Bypass in dex
2021-12-20 17:52:12
Critical security issues in XML encoding in github.com/dexidp/dex
2021-12-20 17:53:53
redhatcve
redhatcve
fedora
fedora
ubuntucve
ubuntucve
CVE-2020-15216
2020-09-29 00:00:00
nessus
nessus
Fedora 32 : golang-github-russellhaering-goxmldsig (2021-9316ee2948)
2021-01-14 00:00:00
Fedora 33 : golang-github-russellhaering-goxmldsig (2021-a2a7673da2)
2021-01-14 00:00:00
debiancve
debiancve
CVE-2020-15216
2020-09-29 16:15:11
openvas
openvas
veracode
veracode
Signature Validation Bypass
2020-09-30 01:47:02