Authored by Google Security Research, Felix Wilhelm

XML signature verification in .NET 6 as implemented in System.Security.Cryptography.Xml.SignedXml is vulnerable to external entity injection attacks.

advisories | CVE-2022-34716

RELATED ARTICLESMORE FROM AUTHOR