3 matches found
Improper Verification of Cryptographic Signature in starkbank-ecdsa
The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...
9.8CVSS5.1AI score0.01027EPSS
SaveExploits1References4Affected Software1
CVE-2021-43571
The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...
9.8CVSS0.01027EPSS
SaveExploits1References5
CVE-2021-43571: Improper Verification of Cryptographic Signature
The verify function in the Stark Bank Node.js ECDSA library ecdsa-node 1.1.2 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages...
9.8CVSS5.9AI score0.01027EPSS
SaveExploits1References2
20