Executive brief
XML digital signature validation bypass in github.com/russellhaering/goxmldsig
Affected products
- Go github.com/russellhaering/goxmldsig
Junglewise Threat Intelligence
CVE-2020-15216: GO-2020-0050 - XML digital signature validation bypass in github.com/russellhaering/goxmldsig
CVE-2020-15216 · Severity: low · CVSS 3.1 · Published 2021-04-14
Technologies: github.com/russellhaering/goxmldsig (Go). Vendors: Go.
Related threats
- russellhaering goxmldsig signature bypass in validateSignature
- GO-2022-0409 - An attacker can create an XML file which completely bypasses signature validation, passing off an altered file as a signed one.
- Critical security issues in XML encoding in github.com/dexidp/dex
- Signature Validation Bypass
- GO-2020-0046 - Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig