Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2013-2172

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-r237-w2w6-jq3p

Inefficient Algorithmic Complexity in Apache Santuario XML Security `jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java` in Apache Santuario XML Security for Java 1.4.x before 1.4.8 and 1.5.x before 1.5.5 allows context-dependent attackers to spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak "canonicalization algorithm to apply to the SignedInfo part of the Signature."

gitlab/maven/org.apache.santuario/xmlsec/CVE-2013-2172

XML signature spoofing `jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java` in this package allows context-dependent attackers to spoof an XML Signature by using the `CanonicalizationMethod` parameter to specify an arbitrary weak "canonicalization algorithm to apply to the `SignedInfo` part of the Signature."

gitlab/maven/xml-security/xmlsec/CVE-2013-2172

Cryptographic Issues Attackers could spoof an XML Signature by using the CanonicalizationMethod parameter to specify an arbitrary weak canonicalization algorithm to apply to the `SignedInfo` part of the Signature.