Lucene search
GoogleOSV:GHSA-QC4J-HRJ6-CPPFHistoryNov 21, 2023 - 12:30 a.m.
upydev has weak encryption padding
2023-11-2100:30:27
Google
osv.dev
9
weak encryption padding
upydev v0.4.3
keygen.py
sensitive information
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
25.1%
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.
Related
github
github
upydev has weak encryption padding
2023-11-21 00:30:27
cve
cve
CVE-2023-48051
2023-11-20 23:15:06
nvd
nvd
CVE-2023-48051
2023-11-20 23:15:06
prion
prion
Information disclosure
2023-11-20 23:15:00
veracode
veracode
Weak Encryption
2023-11-21 08:01:52
osv
osv
CVE-2023-48051
2023-11-20 23:15:06
cvelist
cvelist
CVE-2023-48051
2023-11-20 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
25.1%
Related for OSV:GHSA-QC4J-HRJ6-CPPF