2 matches found
Integrity Check Bypass
Striae is vulnerable to Integrity Check Bypass. The vulnerability is due to reliance on hash-only validation in the digital confirmation workflow, where attackers could modify both package contents and corresponding manifest hash fields, allowing tampered confirmation packages to pass integrity...
8.2CVSS5.2AI score0.00118EPSS
SaveExploits0References2Affected Software1
PT-2026-24744
Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only validation trusted manifest hash fields that could be modified together with package content, allowing tampered...
8.2CVSS5.8AI score0.00118EPSS
SaveExploits0References6
20