.NET XML Signature Verification External Entity Injection

XML signature verification in .NET 6 as implemented in System.Security.Cryptography.Xml.SignedXml is vulnerable to external entity injection attacks.

Leave a Reply