Skip to content

fix: aesencryption in AESEncryption.java#7392

Open
orbisai0security wants to merge 1 commit intoTheAlgorithms:masterfrom
orbisai0security:fix-fix-aes-decrypted-text-logging-v001
Open

fix: aesencryption in AESEncryption.java#7392
orbisai0security wants to merge 1 commit intoTheAlgorithms:masterfrom
orbisai0security:fix-fix-aes-decrypted-text-logging-v001

Conversation

@orbisai0security
Copy link
Copy Markdown

Summary

Fix high severity security issue in src/main/java/com/thealgorithms/ciphers/AESEncryption.java.

Vulnerability

Field Value
ID V-001
Severity HIGH
Scanner multi_agent_ai
Rule V-001
File src/main/java/com/thealgorithms/ciphers/AESEncryption.java:41

Description: AESEncryption.java at line 41 prints the full plaintext result of AES decryption directly to standard output using System.out.println. In any deployment where this library is embedded in a server application, container, or cloud function, standard output is routinely captured in log files, container log streams (e.g., Docker/Kubernetes logs), or log aggregation pipelines (e.g., ELK Stack, Splunk, AWS CloudWatch). Any party with read access to those log systems can retrieve the decrypted plaintext without ever possessing the AES encryption key, completely defeating the purpose of encryption.

Changes

  • src/main/java/com/thealgorithms/ciphers/AESEncryption.java

Verification

  • Build passes
  • Scanner re-scan confirms fix
  • LLM code review passed

Automated security fix by OrbisAI Security

Automated security fix generated by Orbis Security AI
@codecov-commenter
Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 0% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 79.55%. Comparing base (b3e31b5) to head (ea7f3bc).

Files with missing lines Patch % Lines
.../java/com/thealgorithms/ciphers/AESEncryption.java 0.00% 1 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##             master    #7392      +/-   ##
============================================
+ Coverage     79.53%   79.55%   +0.01%     
- Complexity     7176     7178       +2     
============================================
  Files           798      798              
  Lines         23467    23467              
  Branches       4617     4617              
============================================
+ Hits          18665    18669       +4     
+ Misses         4055     4054       -1     
+ Partials        747      744       -3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants