AI Score
Confidence
Low
SSVC
Exploitation
poc
Automatable
no
Technical Impact
total
An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver.
www.openwall.com/lists/oss-security/2023/09/21/5
github.com/schollz/croc/issues/595
www.openwall.com/lists/oss-security/2023/09/08/2