[HIGH] [CWE-327] ECB mode detected — use CBC, CTR, or GCM mode instead

[iamngoni]

Heimdall Finding

• Severity: high
• Confidence: high
• Fingerprint: 1f51ebe8b21c49eefac8fd2352789d60064abcef4a9eea6a8550d21fda165ed4
• Location: dhra_api/services/helpers/encryption.py:20-20
• CWE: CWE-327

Summary

ECB mode detected — use CBC, CTR, or GCM mode instead

Evidence

logger.info("Encrypting data")
    raw = pad(raw.encode(), 16)
    cipher = AES.new(key.encode("utf-8"), AES.MODE_ECB)
    return base64.b64encode(cipher.encrypt(raw)).decode("utf-8")