high7.5
CVE-2023-48053
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption.
Impact
Archery v1.10.0 uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption. This vulnerability can lead to the disclosure of information and communications.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Archerydms | Archery | Version 1.9.0 |