Moov: Security Vulnerabilities
In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).
CVSS Score
9.1
EPSS Score
0.001
Published
2023-05-30