carglglz/upydev · Security
upydev has weak encryption padding
- GHSA ID
- GHSA-qc4j-hrj6-cppf
- CVE ID
- CVE-2023-48051
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.
CWEs
- CWE-326 · Inadequate Encryption Strength