CVE-2023-48056 | BDVDB-2026-217213 Detail

Description#

PyPinkSign v0.5.1 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gxx777.github.io/PyPinkSign_v0.5.1_Cryptographic_API_Misuse_Vulnerability.md

Exploit#

No public exploit known

History#

Version 12023-11-16Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.