CVE-2023-44690

Impact

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via `/mycli/config.py`.

Affected packages

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• GitHub advisory
• https://github.com/dbcli/mycli/issues/1131
• https://github.com/advisories/GHSA-v9vj-9pxv-mr2w
• https://nvd.nist.gov/vuln/detail/CVE-2023-44690
• https://github.com/pypa/advisory-database/tree/main/vulns/mycli/PYSEC-2023-213.yaml