Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25744
HistoryJun 23, 2020 - 3:45 a.m.

Insecure RSA Signature Validation

2020-06-2303:45:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

0.017 Low

EPSS

Percentile

87.7%

jsrsasign does not properly validate RSA signatures. The decryption implementation does not detect ciphertext modification prepended by \0 bytes to ciphertexts, allowing an attacker to prepend NULL bytes with the goal of triggering memory corruption issues.

0.017 Low

EPSS

Percentile

87.7%

Related for VERACODE:25744