Insecure encryption algorithm In cookie-encrypter
Description
Bit flip attack vulnerability in cookie-encrypter due to a weakness in the encryption method used in cookie-encrypter an attack can use the world visible IV to edit encrypted cookies without decrypting the cookie itself. This is known as an AES CBC bit flipping attack.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 npm |
Aliases
1. 2. 3. 4.
References
1. 2. 3. 4.