netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-7g3v-4ggr-xvjf
GHSA-hp56-xvf4-g6wr
This commit is contained in:
advisory-database[bot]
2024-05-21 18:19:59 +00:00
parent 9a70c7787b
commit 1a3a7d8d74
2 changed files with 22 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/09/GHSA-7g3v-4ggr-xvjf/GHSA-7g3v-4ggr-xvjf.json
+11 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7g3v-4ggr-xvjf",
"modified": "2023-09-22T19:42:20Z",
"modified": "2024-05-21T18:18:33Z",
"published": "2023-09-20T06:30:50Z",
"aliases": [
"CVE-2023-43621"
],
"summary": "Croc may expose secret to local users",
"details": "An issue was discovered in Croc through 9.6.5. The shared secret, located on a command line, can be read by local users who list all processes and their arguments.",
"details": "An issue was discovered in Croc before 9.6.16. The shared secret, located on a command line, can be read by local users who list all processes and their arguments.",
"severity": [
{
"type": "CVSS_V3",
@@ -28,7 +28,7 @@
"introduced": "0"
},
{
"last_affected": "9.6.5"
"fixed": "9.6.16"
}
]
}
@@ -44,6 +44,14 @@
"type": "WEB",
"url": "https://github.com/schollz/croc/issues/598"
},
{
"type": "WEB",
"url": "https://github.com/schollz/croc/pull/701"
},
{
"type": "WEB",
"url": "https://github.com/schollz/croc/commit/863dabb93a271f41b3431c4384357e1856a69533"
},
{
"type": "PACKAGE",
"url": "https://github.com/schollz/croc"
advisories/github-reviewed/2023/09/GHSA-hp56-xvf4-g6wr/GHSA-hp56-xvf4-g6wr.json
+11 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hp56-xvf4-g6wr",
"modified": "2023-09-22T19:25:11Z",
"modified": "2024-05-21T18:19:30Z",
"published": "2023-09-20T06:30:50Z",
"aliases": [
"CVE-2023-43617"
],
"summary": "Cros secrets may be disclosed to untrusted relay",
"details": "An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name.",
"details": "An issue was discovered in Croc before 9.6.16. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name.",
"severity": [
{
"type": "CVSS_V3",
@@ -28,7 +28,7 @@
"introduced": "0"
},
{
"last_affected": "9.6.5"
"fixed": "9.6.16"
}
]
}
@@ -44,6 +44,14 @@
"type": "WEB",
"url": "https://github.com/schollz/croc/issues/596"
},
{
"type": "WEB",
"url": "https://github.com/schollz/croc/pull/699"
},
{
"type": "WEB",
"url": "https://github.com/schollz/croc/commit/0f1ca436cd8e608738da0b23bf594537cfbe6213"
},
{
"type": "PACKAGE",
"url": "https://github.com/schollz/croc"