Threats tagged 'ghsa-mv28-wj57-f57g'

YesWiki versions 4.6.2 through 4.6.5 contain a vulnerability in the HttpSignatureService::verifySignature() method where the result of PHP's openssl_verify() is checked using a loose boolean negation. Because openssl_verify() can return -1 on certain errors (such as using a DSA public key with an RSA algorithm), which evaluates as truthy in PHP, the signature verification failure is bypassed. This allows unauthenticated attackers to send malicious ActivityPub requests that are processed as valid, enabling unauthorized Create, Update, or Delete operations.