CVE-2019-8919

CVE-2019-8919 describes a vulnerability in the Seafile Android Client (seadroid) application, versions through 2.2.13, where it consistently uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode for encrypting private data. This design flaw significantly lowers the bar for attackers to perform chosen-plaintext or dictionary attacks, potentially exposing sensitive user information. With a CVSS score of 7.5 (HIGH), the vulnerability is network-exploitable with low attack complexity, allowing for high confidentiality impact without requiring user interaction or privileges. Despite its severity, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.