CVE-2013-7463

CVE-2013-7463 describes a cryptographic vulnerability in the aescrypt gem 1.0.0 for Ruby, specifically impacting its AESCrypt.encrypt and AESCrypt.decrypt functions. The flaw stems from a lack of IV randomization in CBC mode, enabling attackers to bypass cryptographic protections through a chosen plaintext attack. This vulnerability carries a high severity CVSS score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating it can be exploited remotely with low complexity to achieve high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.