openca openca vulnerabilities and exploits

(subscribe to this query)

Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and previous versions, and 0.9.2 RC6 and previous versions, allows remote malicious users to inject arbitrary web script or HTML via the form input fields.

Openca Openca 0.9.0.1 Openca Openca 0.9.0.2 Openca Openca 0.9.1.7 Openca Openca 0.9.1.8 Openca Openca 0.8.6 Openca Openca 0.9.0 Openca Openca 0.9.1.5 Openca Openca 0.9.1.6 Openca Openca 0.9.1 Openca Openca 0.9.1.2 Openca Openca 0.9.2 Rc6 Openca Openca 0.8.0 Openca Openca 0.8.1 Openca Openca 0.9.1.3 Openca Openca 0.9.1.4

OpenCA prior to 0.9.1.4 does not use the correct certificate in a chain to check the serial, which could cause OpenCA to accept revoked or expired certificates.

Openca Openca 0.8.0 Openca Openca 0.8.1 Openca Openca 0.8.6 Openca Openca 0.9.1.2 Openca Openca 0.9.1.3 Openca Openca 0.9.0 Openca Openca 0.9.0.1 Openca Openca 0.9.0.2 Openca Openca 0.9.1

The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and previous versions only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted b...

Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote malicious users to perform unauthorized actions as authorized users via a link or IMG tag to RAServer.

Openca Openca Pki

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook