PT-2020-14094 · Jsrsasign · Jsrsasign

Name of the Vulnerable Software and Affected Versions: jsrsasign versions prior to 8.0.18 Description: The issue concerns the RSA PKCS1 v1.5 decryption implementation in the jsrsasign package. It fails to detect ciphertext modification when '0' bytes are prepended to ciphertexts, allowing it to...