POJIA破甲
地图 / Missing AES-GCM Authentication Tag Validation and Improper Deprecation Handling

Missing AES-GCM Authentication Tag Validation and Improper Deprecation Handling

密码学缺陷 / Missing Required Cryptographic Step / #3463949

厂商
Node.js
严重程度
中危 · CVSS 8.2
赏金
—
弱点
Missing Required Cryptographic Step
研究员
@sideni
披露日期
2025-12-19
资产
https://github.com/nodejs/node
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(4981 字符中的一小部分)
**Summary:** In Node.js' crypto module, the `createDecipheriv` states that "the `authTagLength` option defaults to 16 bytes and must be set to a different value if a different length is used." …
原文中的代码
const {
    createCipheriv,
    createDecipheriv
} = require('crypto');

const key = 'key0123456789key';
const nonce = '123456789012';

var algo = 'aes-128-gcm';
const cipher = createCipheriv(algo, key, nonce);
const plaintext = 'This is some plaintext';

const ciphertext = cipher.update(plaintext, …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Node.js 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @sideni · 版权归作者与 Node.js 所有

同类报告

HMAC signature verification omits endpoint and payload allowing request forgery on CoinMate APICoinMate.io · 2026-05-20`check_reserve_proof` sums RingCT ECDH amounts without checking the output commitmentMonero · 2026-08-05SSL options ISSUERCERT, EC_CURVES and CRLFILE silently ignored by non-OpenSSL backendscurl · 2026-01-20SpendProofV1 txid-substitution: get_spend_proof/check_spend_proof do not verify returned transaction hashMonero · 2026-08-05Phabricator is vulnerable to padding oracle attacks and chosen-ciphertext attacks.Phabricator · 2017-04-05 · $750Able to bypass HSTS using trailing dotcurl · 2026-02-26