Read the docs

Aescrypt Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Aescrypt Project records in CISA KEV

No Aescrypt Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 35

The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms via a chosen plaintext…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01148 Published 2017-04-19 No fix listed CWE-330
Open these records in search →