CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.4.0 are vulnerable due to a flaw in the openssl_encrypt function that bypasses JSON schema validation when the jsonschema library is absent, allowing attackers to inject malformed metadata. This critical vulnerability can lead to the processing of malicious data, potentially compromising the integrity and security of applications relying on OpenSSL for encryption. Organizations using affected versions should prioritize immediate updates to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
openssl_encrypt versions before 1.4.0 silently skip JSON schema validation when the jsonschema library is not installed, allowing malformed metadata to be accepted. Attackers can remove the jsonschema package or supply unknown metadata format versions to bypass all schema checks and process malicious data.
Related CVEs
Other vulnerabilities affecting the same vendor(s)