/ CVE-2022-21449: Psychic Signatures in Java It’s hard to ove | Sys-Admin InfoSec
/ CVE-2022-21449: Psychic Signatures in Java
It’s hard to overstate the severity of this bug. If you are using ECDSA signatures for any of these security mechanisms, then an attacker can trivially and completely bypass them if your server is running any Java 15, 16, 17, or 18..:
