Schollz Croc
6 CVEs affecting Schollz Croc. Latest disclosed: 2023-09-20. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-43620 | High | 7.8 | 2023-09-20 | An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver. |
CVE-2023-43619 | High | 7.8 | 2023-09-20 | An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized_keys file. |
CVE-2023-43616 | Medium | 5.5 | 2023-09-20 | An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction. |
CVE-2023-43618 | Medium | 5.3 | 2023-09-20 | An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an ips? message. |
CVE-2023-43617 | Medium | 5.3 | 2023-09-20 | An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Re… |
CVE-2023-43621 | Medium | 4.7 | 2023-09-20 | An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their argume… |