Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
phpseclib's AES-CBC unpadding susceptible to padding oracle timing attack
Vulnerability Description
phpseclib is a PHP secure communications library. Projects using versions 1.0.26 and below, 2.0.0 through 2.0.51, and 3.0.0 through 3.0.49 are vulnerable to a to padding oracle timing attack when using AES in CBC mode. This issue has been fixed in versions 1.0.27, 2.0.52 and 3.0.50.
CVSS Information
N/A
Vulnerability Type
通过时间差异性导致的信息暴露
Vulnerability Title
phpseclib 安全漏洞
Vulnerability Description
phpseclib是phpseclib开源的一个 PHP 安全通信库。 phpseclib 1.0.26及之前版本、2.0.0至2.0.51版本和3.0.0至3.0.49版本存在安全漏洞，该漏洞源于使用AES CBC模式时存在填充预言机计时攻击。
CVSS Information
N/A
Vulnerability Type
N/A