CVE-2024-34581

The W3C XML Signature Syntax and Processing (XMLDsig) specification, specifically version 1.0 , lacks explicit warnings regarding Server-Side Request Forgery (SSRF) risks when the RetrievalMethod is used to obtain key or certificate information via a URI. This omission may have contributed to vul...