PatchTheCVEsignedxml vulnerabilities and fixes
Recent CVEs affecting signedxml, with upgrade or downgrade steps. 1 tracked.
signedxml has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-05-30. Highest priority: CVE-2023-34205 (score 45/100).
- CVE-2023-34205 CRITICAL 9.1 DOWNGRADE In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing
FAQ
How do I fix signedxml vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is signedxml being exploited right now?
None of the tracked signedxml CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which signedxml CVE should I patch first?
CVE-2023-34205 currently ranks highest (45/100): In Moov signedxml through 1.0.0, parsing the raw XML (as received) can result in different output than parsing.