PT-2024-25995 · W3C · Xml Signature Syntax/Processing

Published 2024-06-26 · Updated 2024-07-03 · CVE-2024-34581

Mitre

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

The W3C XML Signature Syntax and Processing (XMLDsig) specification, starting with 1.0, was originally published with a "RetrievalMethod is a URI ... that may be used to obtain key and/or certificate information" statement and no accompanying information about SSRF risks, and this may have contributed to vulnerable implementations such as those discussed in CVE-2023-36661 and CVE-2024-21893. NOTE: this was mitigated in 1.1 and 2.0 via a directly referenced Best Practices document that calls on implementers to be wary of SSRF.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2024-34581

Affected Products

Xml Signature Syntax/Processing

References · 6

• 🔥 https://github.com/zmanion/Vulnerabilities/blob/main/CVE-2024-21893.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-34581 · Security Note
• https://w3.org/TR/xmldsig-core1 · Note
• https://w3.org/TR/2013/NOTE-xmldsig-bestpractices-20130411 · Note
• https://w3.org/TR/xmldsig-core2 · Note
• https://w3.org/Signature/Drafts/WD-xmldsig-core-200003plc · Note