CVE-2024-28864 [TagAwareCipher] - Decryption Failure (Regex Match)

🗓️ 18 Mar 2024 21:49:06Reported by GoogleType

osv

osv🔗 osv.dev👁 17 Views

Vulnerability in SecureProps library affects decryption of property data in objects

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-28864	18 Mar 202423:26	–	circl
CNNVD	SecureProps Security Vulnerabilities	18 Mar 202400:00	–	cnnvd
CVE	CVE-2024-28864	18 Mar 202421:49	–	cve
Cvelist	CVE-2024-28864 [TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202421:49	–	cvelist
EUVD	EUVD-2024-1003	3 Oct 202520:07	–	euvd
Github Security Blog	[TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202420:39	–	github
NVD	CVE-2024-28864	18 Mar 202422:15	–	nvd
OSV	GHSA-RJ29-J2G4-77Q8 [TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202420:39	–	osv
Positive Technologies	PT-2024-22613	18 Mar 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-28864	23 May 202507:45	–	redhatcve

Source	Link
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28864.json
github	www.github.com/IlicMiljan/Secure-Props/security/advisories/GHSA-rj29-j2g4-77q8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-28864
github	www.github.com/IlicMiljan/Secure-Props/issues/20
github	www.github.com/IlicMiljan/Secure-Props/commit/ab7b561040cd37fda3dbf9a6cab01fefcaa16627
github	www.github.com/IlicMiljan/Secure-Props/pull/21

02 Apr 2026 10:08Current

4.7Medium risk

Vulners AI Score4.7

CVSS 3.12.6

EPSS0.00867

secureprops php encryption decryption vulnerability regex tags nullencoder tagawarecipher special characters patch update workaround