3 matches found
CVE-2021-43571
The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...
9.8CVSS9.4AI score0.00994EPSS
SaveExploits1References2
CVE-2021-43571
The CVE-2021-43571 entry concerns Stark Bank’s Node.js ECDSA library (ecdsa-node) 1.1.2. The vulnerability stems from the verify function not checking that the signature is non-zero, which enables forging signatures on arbitrary messages. Reported impact indicates potential for signature forgery ...
9.8CVSS9.3AI score0.00994EPSS
SaveExploits1References2Affected Software1
20