[rwth-security] CVE-2024-32962 (CVSS 10): Critical Vulnerability in XML-Crypto

Hallo zusammen,

sofern nicht selber schon gesehen/-lesen hier [0] FYI

"CVE-2024-32962 (CVSS 10): Critical Vulnerability in XML-Crypto Affects Millions"

--> CVSS score 10 wg. "a fundamental oversight in the package’s default configuration, which fails to properly verify the authenticity of digital signatures, thereby allowing signature spoofing ..."

VG

Bernd

[0] https://securityonline.info/cve-2024-32962-cvss-10-critical-vulnerability-in...