Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
s2k.js in OpenPGP.js will decrypt arbitrary messages regardless of passphrase for crafted PGP keys which allows remote attackers to bypass authentication if message decryption is used as an authentication mechanism via a crafted symmetrically encrypted PGP message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenPGP.js 加密问题漏洞
Vulnerability Description
Openpgp.js是一个用JavaScript实现OpenPGP加密算法的库。 OpenPGP.js中的s2k.js文件存在安全漏洞。远程攻击者可借助特制的对称加密PGP消息利用该漏洞绕过身份验证。
CVSS Information
N/A
Vulnerability Type
N/A