Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Nebula Has Possible Blocklist Bypass via ECDSA Signature Malleability
Vulnerability Description
Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint. This issue has been patched in version 1.10.3.
CVSS Information
N/A
Vulnerability Type
密码学签名的验证不恰当
Vulnerability Title
Nebula 数据伪造问题漏洞
Vulnerability Description
Nebula是Web UI Designing开源的一个专注于增强开发的 WordPress 主题框架。 Nebula 1.7.0至1.10.2版本存在数据伪造问题漏洞，该漏洞源于使用P256证书时可能通过ECDSA签名延展性规避证书指纹的阻止列表条目。
CVSS Information
N/A
Vulnerability Type
N/A