PT-2024-22613

🗓️ 18 Mar 2024 00:00:00Reported by Positive TechnologiesType

ptsecurity

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

SecureProps versions 1.2.0–1.2.1 have a decryption bug with NullEncoder and TagAwareCipher.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2024-28864	18 Mar 202423:26	–	circl
CNNVD	SecureProps Security Vulnerabilities	18 Mar 202400:00	–	cnnvd
CVE	CVE-2024-28864	18 Mar 202421:49	–	cve
Cvelist	CVE-2024-28864 [TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202421:49	–	cvelist
EUVD	EUVD-2024-1003	3 Oct 202520:07	–	euvd
Github Security Blog	[TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202420:39	–	github
NVD	CVE-2024-28864	18 Mar 202422:15	–	nvd
OSV	CVE-2024-28864 [TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202421:49	–	osv
OSV	GHSA-RJ29-J2G4-77Q8 [TagAwareCipher] - Decryption Failure (Regex Match)	18 Mar 202420:39	–	osv
RedhatCVE	CVE-2024-28864	23 May 202507:45	–	redhatcve

Source	Link
t	www.t.me/cveNotify/147135
github	www.github.com/IlicMiljan/Secure-Props/commit/ab7b561040cd37fda3dbf9a6cab01fefcaa16627
github	www.github.com/IlicMiljan/Secure-Props/security/advisories/GHSA-rj29-j2g4-77q8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-28864
github	www.github.com/IlicMiljan/Secure-Props/issues/20
twitter	www.twitter.com/CVEnew/status/1769849918493962556
github	www.github.com/IlicMiljan/Secure-Props/pull/21
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/28xxx/CVE-2024-28864.json
osv	www.osv.dev/vulnerability/CVE-2024-28864
github	www.github.com/IlicMiljan/Secure-Props

30 Dec 2025 00:00Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.12.6

EPSS0.00867

SSVC

SecureProps decryption bug NullEncoder TagAwareCipher versions 1.2.0 1.2.1 Base64Encoder