CRITICAL 9.8 NuGet
Improper Verification of Cryptographic Signature in starkbank-ecdsa
GHSA-j3jw-j2j8-2wv9 · CVE-2021-43569
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
The verify function in the Stark Bank .NET ECDSA library (ecdsa-dotnet) 1.3.1 fails to check that the signature is non-zero, which allows attackers to forge signatures on arbitrary messages.
References
Ready to move
Start Securing
Free, no credit card | First findings in minutes