CVE-2023-34205 (published 2023-05-30T00:00:00)
In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing the canonicalized XML. Thus, signature validation can be bypassed via a Signature Wrapping attack (aka XSW).
Affected products: Vendor: n/a
Product: n/a
Versions: n/a