Information Exposure

github.com/schollz/croc is vulnerable to Information Exposure. The vulnerability is due to there case where an explicit IP isn’t provided, the receiver prompts the sender for its local IP addresses using the ips? message. That triggers an unencrypted message exchange and sender will send out cleartext information over the Internet, containing all locally assigned IP addresses. This leads to potential information leakage about the sender’s network configuration and identity.