Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qvjw-73xm-jw34

Опубликовано: 10 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.3
CVSS3: 5.3

Описание

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

EPSS

Процентиль: 2%
0.00111
Низкий

6.3 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-354

Связанные уязвимости

CVSS3: 5.3
ubuntu
4 месяца назад

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

CVSS3: 5.3
nvd
4 месяца назад

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could allow an attacker to recover plaintext through repeated decryption queries with modified ciphertext. In previous versions of wolfSSL the interior padding bytes are not validated.

msrc
4 месяца назад

PKCS7 CBC Padding Oracle — Plaintext Recovery

CVSS3: 5.3
debian
4 месяца назад

A padding oracle exists in wolfSSL's PKCS7 CBC decryption that could a ...

EPSS

Процентиль: 2%
0.00111
Низкий

6.3 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-354