writeups.xyz / Gregor Samsa: Exploiting Java's XML Signature Verification

Submitter : c2a

Date: 2 November 2022

Bounty : undisclosed

Vulnerabilities :

• Integer Truncation
• RCE
• SAML

Programs :

• OpenJDK
• Apache Commons BCEL

Authors :

• Felix Wilhelm (@_Fel1x)

Link :
https://googleprojectzero.blogspot.com/2022/11/gregor-samsa-exploiting-java-xml.html