[HIGH] [CWE-327] ECB mode detected — use CBC, CTR, or GCM mode instead

[iamngoni]

Heimdall Finding

• Severity: high
• Confidence: high
• Fingerprint: 8a3a2e6e7e2cbef9650e328114c649e475bfacdeba8f21c39d3fdd190d96c086
• Location: dhra_api/services/helpers/encryption.py:27-27
• CWE: CWE-327

Summary

ECB mode detected — use CBC, CTR, or GCM mode instead

Evidence

logger.info("Decrypting data")
    enc = base64.b64decode(enc)
    cipher = AES.new(key.encode("utf-8"), AES.MODE_ECB)
    return unpad(cipher.decrypt(enc), 16)