Insecure Cryptography

2022-03-2112:01:43

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

insecure cryptography

digestinfo vulnerability

rsa.js file

attacker actions

EPSS

0.001

Percentile

35.9%

JSON

node-forge improperly verifies cryptographic signatures. The vulnerability exists through improper verification of DigestInfo in the rsa.js file allowing to validate the signature in an invalid structure which allows an attacker to perform unwanted actions.