CVE-2019-9153

Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a…

published August 22, 2019

CVSS
—
EPSS
2%
Percentile
80.7
In the wild
Unconfirmed
What it is

Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02013 · 80.7th percentile
Published
2019-08-22T15:30Z
EPSS history
Timeline
  • 22 AUG 15:30Z
    Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a…
    cvelistv5