Home Tools Exploits & CVE's .NET XML Signature Verification External Entity Injection

.NET XML Signature Verification External Entity Injection

By
The Cyber Post
-
0
Authored by Google Security Research, Felix Wilhelm

XML signature verification in .NET 6 as implemented in System.Security.Cryptography.Xml.SignedXml is vulnerable to external entity injection attacks.

advisories | CVE-2022-34716

RELATED ARTICLES

© Copyright The Cyber Post 2020
Exit mobile version