GoogleOSV:GO-2023-2071Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
31.7%
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc
References
www.openwall.com/lists/oss-security/2023/09/21/5
github.com/advisories/GHSA-8c8w-f7wp-2jr2
github.com/schollz/croc/commit/4929635eb875d2304e9415b8f4aa62af9e1a2339
github.com/schollz/croc/issues/594
github.com/schollz/croc/pull/698
nvd.nist.gov/vuln/detail/CVE-2023-43616
www.openwall.com/lists/oss-security/2023/09/08/2
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
31.7%