mycli has Inadequate Encryption Strength · CVE-2023-44690 · GitHub Advisory Database · GitHub

mycli has Inadequate Encryption Strength

Moderate severity GitHub Reviewed Published Oct 20, 2023 to the GitHub Advisory Database • Updated Nov 7, 2023

Package

mycli (pip)

Affected versions

<= 1.27.0

Patched versions

None

Description

Inadequate encryption strength in mycli 1.27.0 allows attackers to view sensitive information via /mycli/config.py.

References

Published by the National Vulnerability Database

Oct 19, 2023

Published to the GitHub Advisory Database Oct 20, 2023

Reviewed Oct 20, 2023

Last updated Nov 7, 2023