Sensitive Information Exposure

🗓️ 29 Sep 2023 10:17:55Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 8 Views

github.com/schollz/croc Sensitive Information Exposur

Reporter	Title	Published	Views	Family All 19
ATTACKERKB	CVE-2023-43617	20 Sep 202306:15	–	attackerkb
AlpineLinux	CVE-2023-43617	20 Sep 202300:00	–	alpinelinux
Chainguard	CVE-2023-43617 vulnerabilities	20 Sep 202306:15	–	cgr
Circl	CVE-2023-43617	20 Sep 202312:30	–	circl
CNNVD	Croc Security Breach	20 Sep 202300:00	–	cnnvd
CVE	CVE-2023-43617	20 Sep 202300:00	–	cve
Cvelist	CVE-2023-43617	20 Sep 202300:00	–	cvelist
EUVD	EUVD-2023-2524	3 Oct 202520:07	–	euvd
Github Security Blog	Cros secrets may be disclosed to untrusted relay	20 Sep 202306:30	–	github
NVD	CVE-2023-43617	20 Sep 202306:15	–	nvd

Vulners

Node

schollz crocMatch9.6.15-r0go

AND

schollz crocMatch9.6.15-r3go

AND

schollz crocMatch9.6.15-r2go

AND

schollz crocMatch10.0.11-r0go

AND

schollz crocMatch9.6.15-r1go

AND

alpinelinux alpine_linuxMatch3.20

OR

schollz crocMatch9.6.4-r0go

AND

schollz crocMatch8.6.12-r0go

AND

schollz crocMatch9.6.4-r2go

AND

schollz crocMatch9.6.1-r0go

AND

schollz crocMatch8.0.11-r0go

AND

schollz crocMatch9.5.5-r1go

AND

schollz crocMatch9.6.5-r3go

AND

schollz crocMatch9.6.14-r1go

AND

schollz crocMatch9.6.4-r3go

AND

schollz crocMatch8.6.8-r0go

AND

schollz crocMatch9.3.0-r0go

AND

schollz crocMatch9.6.15-r1go

AND

schollz crocMatch9.6.4-r1go

AND

schollz crocMatch9.6.15-r3go

AND

schollz crocMatch8.6.11-r0go

AND

schollz crocMatch9.6.1-r1go

AND

schollz crocMatch9.5.0-r1go

AND

schollz crocMatch9.1.2-r0go

AND

schollz crocMatch9.6.15-r0go

AND

schollz crocMatch9.5.2-r1go

AND

schollz crocMatch9.6.3-r0go

AND

schollz crocMatch9.5.4-r0go

AND

schollz crocMatch9.5.5-r0go

AND

schollz crocMatch9.3.0-r1go

AND

schollz crocMatch9.5.1-r0go

AND

schollz crocMatch9.6.0-r2go

AND

schollz crocMatch9.6.0-r1go

AND

schollz crocMatch10.0.1-r0go

AND

schollz crocMatch9.5.2-r0go

AND

schollz crocMatch9.2.0-r0go

AND

schollz crocMatch9.6.9-r0go

AND

schollz crocMatch9.1.1-r0go

AND

schollz crocMatch9.1.4-r0go

AND

schollz crocMatch9.6.0-r3go

AND

schollz crocMatch9.1.4-r1go

AND

schollz crocMatch9.6.15-r2go

AND

schollz crocMatch9.6.5-r4go

AND

schollz crocMatch9.6.1-r2go

AND

schollz crocMatch9.5.3-r1go

AND

schollz crocMatch9.6.6-r0go

AND

schollz crocMatch8.6.10-r0go

AND

schollz crocMatch9.6.1-r3go

AND

schollz crocMatch9.1.0-r0go

AND

schollz crocMatch9.6.10-r0go

AND

schollz crocMatch9.6.0-r4go

AND

schollz crocMatch9.6.5-r1go

AND

schollz crocMatch9.6.4-r4go

AND

schollz crocMatch9.5.6-r0go

AND

schollz crocMatch9.5.0-r0go

AND

schollz crocMatch9.6.5-r2go

AND

schollz crocMatch9.6.0-r0go

AND

schollz crocMatch9.6.14-r0go

AND

alpinelinux alpine_linuxMatchedge

OR

schollz github.com/schollz/crocRangev0.1.0–0.1.0go

Source	Link
github	www.github.com/schollz/croc/issues/596
bugzilla	www.bugzilla.suse.com/show_bug.cgi
github	www.github.com/advisories/GHSA-hp56-xvf4-g6wr
openwall	www.openwall.com/lists/oss-security/2023/09/08/2
openwall	www.openwall.com/lists/oss-security/2023/09/21/5

04 Oct 2023 00:16Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.3

EPSS0.00128

SSVC

vulnerability sensitive information exposure croc shared secret attacker communications software