CVE-2013-2153

The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows…

published August 20, 2013

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to reuse signatures and spoof arbitrary content via crafted Reference elements in the Signature, aka "XML Signature Bypass issue."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04767 · 91.9th percentile
Published
2013-08-20T22:00Z
EPSS history
Timeline
  • 20 AUG 22:00Z
    The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows…
    cvelistv5