GHSA-RJ29-J2G4-77Q8 [TagAwareCipher] - Decryption Failure (Regex Match)

🗓️ 18 Mar 2024 20:39:00Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Vulnerability in SecureProps regex failing to detect tags during decryption, causing encrypted data to be returned in plain format. Users affected by using TagAwareCipher with non-default NullEncoder base cipher

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-28864	18 Mar 202423:26	–	circl
CNNVD	SecureProps Security Vulnerabilities	18 Mar 202400:00	–	cnnvd
CVE	CVE-2024-28864	18 Mar 202421:49	–	cve
Cvelist	CVE-2024-28864 [TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202421:49	–	cvelist
EUVD	EUVD-2024-1003	3 Oct 202520:07	–	euvd
Github Security Blog	[TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202420:39	–	github
NVD	CVE-2024-28864	18 Mar 202422:15	–	nvd
OSV	CVE-2024-28864 [TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202421:49	–	osv
Positive Technologies	PT-2024-22613	18 Mar 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-28864	23 May 202507:45	–	redhatcve

Source	Link
github	www.github.com/IlicMiljan/Secure-Props/security/advisories/GHSA-rj29-j2g4-77q8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-28864
github	www.github.com/IlicMiljan/Secure-Props/issues/20
github	www.github.com/IlicMiljan/Secure-Props/pull/21
github	www.github.com/IlicMiljan/Secure-Props/commit/ab7b561040cd37fda3dbf9a6cab01fefcaa16627
github	www.github.com/IlicMiljan/Secure-Props

19 Mar 2024 18:46Current

3.4Low risk

Vulners AI Score3.4

CVSS 3.12.6

EPSS0.00867