Lucene search
Veracode Vulnerability DatabaseVERACODE:38845HistoryJan 12, 2023 - 5:02 a.m.
Hash Collision
2023-01-1205:02:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
hash collision
vulnerability
remote attacker
sha-1
github.com/robotsandpencils/go-saml
0.001 Low
EPSS
Percentile
32.6%
github.com/robotsandpencils/go-saml is vulnerable to hash collision attacks. A remote attacker is able to cause hash collisions through the use of vulnerable SHA-1 in authnrequest.go and authnresponse.go files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/robotsandpencils/go-saml | eq | HEAD | |
| github.com/robotsandpencils/go-saml | eq | HEAD |
Related
osv
osv
Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml
2021-04-14 20:04:52
go-saml's XML Digital Signatures use SHA-1
2022-12-28 03:30:28
nvd
nvd
CVE-2020-36563
2022-12-28 03:15:09
cvelist
cvelist
CVE-2020-36563 Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml
2022-12-27 21:13:29
prion
prion
Input validation
2022-12-28 03:15:00
cve
cve
CVE-2020-36563
2022-12-28 03:15:09
github
github
go-saml's XML Digital Signatures use SHA-1
2022-12-28 03:30:28
gitlab
gitlab
Use of Weak Hash
2022-12-28 00:00:00