CVE-2019-9153

Published August 22nd, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

Improper Verification of a Cryptographic Signature in OpenPGP.js <=4.1.2 allows an attacker to forge signed messages by replacing its signatures with a "standalone" or "timestamp" signature.

openpgpjs/openpgpjs

OpenPGP implementation for JavaScript

GitHub

5.95K