CVE-2017-20001
The AES encryption project 7.x and 8.x for Drupal does not sufficiently prevent attackers from decrypting data, aka SA-CONTRIB-2017-027. NOTE: This project is not covered by Drupal's security advisory policy.
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products