Critical severityNVD Advisory· Published May 30, 2023· Updated Jan 10, 2025
CVE-2023-34205
CVE-2023-34205
Description
In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/moov-io/signedxmlGo | < 1.1.0 | 1.1.0 |
Affected products
2- Moov/signedxmldescription
Patches
Vulnerability mechanics
References
6News mentions
0No linked articles in our index yet.