Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In OASIS Digital Signature Services (DSS) 1.0, an attacker can control the validation outcome (i.e., trigger either a valid or invalid outcome for a valid or invalid signature) via a crafted XML signature, when the InlineXML option is used. This defeats the expectation of non-repudiation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Digital Signature Services 数据伪造问题漏洞
Vulnerability Description
OASIS Digital Signature Services是OASIS国际标准组织的一个数字签名服务，该标准定义了创建和验证CMS和XMLDSig兼容签名的基本功能。 Digital Signature Services (DSS) 1.0存在数据伪造问题漏洞，攻击者使用该漏洞能控制验证结果。
CVSS Information
N/A
Vulnerability Type
N/A