Executive brief
Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig
Affected products
- Go github.com/russellhaering/goxmldsig
- Go github.com/russellhaering/gosaml2
CVE identifiers
- CVE-2020-7711
- CVE-2020-7731
Junglewise Threat Intelligence
CVE-2020-7711: GO-2020-0046 - Panic due to malformed XML digital signature in github.com/russellhaering/goxmldsig
CVE-2020-7711 · Severity: low · CVSS 3.1 · Published 2021-04-14
Technologies: github.com/russellhaering/goxmldsig (Go), github.com/russellhaering/gosaml2 (Go). Vendors: Go.
Related threats
- GO-2026-4760 - CBC Padding Panic , Unauthenticated Process Crash in github.com/russellhaering/gosaml2
- GO-2026-4764 - Unsigned SAML LogoutRequest Acceptance in gosaml2 in github.com/russellhaering/gosaml2
- russellhaering goxmldsig signature bypass in validateSignature
- Unsigned SAML LogoutRequest Acceptance in gosaml2
- gosaml2 CBC Padding Panic , Unauthenticated Process Crash