Encryption fallback returns plaintext silently #165

New Issue

2026-04-10T16:03:49+02:00

shahondin1624 commented

2026-04-10 16:03:49 +02:00

Severity: HIGH

Location

lib/Service/EncryptionService.php:60-62

Description

If encryption fails (e.g., corrupted ICrypto configuration), encrypt() returns the plaintext value as a fallback. This means sensitive data (IBAN, health info) could be stored unencrypted in the database without any indication to the user or admin.

Recommendation

Throw an exception instead of silently returning plaintext. Data loss prevention is secondary to data exposure prevention for IBAN/medical data.

## Severity: HIGH ## Location `lib/Service/EncryptionService.php:60-62` ## Description If encryption fails (e.g., corrupted ICrypto configuration), `encrypt()` returns the plaintext value as a fallback. This means sensitive data (IBAN, health info) could be stored unencrypted in the database without any indication to the user or admin. ## Recommendation Throw an exception instead of silently returning plaintext. Data loss prevention is secondary to data exposure prevention for IBAN/medical data.

shahondin1624 added the backend security priority:high labels 2026-04-10 16:03:49 +02:00

shahondin1624 referenced this issue from a commit

2026-04-10 16:15:19 +02:00

fix: throw exception instead of returning plaintext when encryption fails (Closes #165)

shahondin1624 referenced a pull request that will close this issue

2026-04-10 16:15:27 +02:00

fix: throw exception instead of returning plaintext when encryption fails (Closes #165) #178

shahondin1624 closed this issue

2026-04-10 16:15:31 +02:00

shahondin1624 referenced this issue from a commit

2026-04-10 16:15:32 +02:00

fix: throw exception instead of returning plaintext when encryption fails (Closes #165) (#178)