Vulnerabilities (CVE)

Filtered by vendor Moov Subscribe
Filtered by product Signedxml
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-34205 1 Moov 1 Signedxml 2024-11-21 N/A 9.1 CRITICAL
In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).