netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-7mp6-929p-pqhj
GHSA-8c8w-f7wp-2jr2
This commit is contained in:
advisory-database[bot]
2024-05-21 18:22:05 +00:00
parent 1a3a7d8d74
commit e17ec342c6
2 changed files with 22 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/09/GHSA-7mp6-929p-pqhj/GHSA-7mp6-929p-pqhj.json
+11 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7mp6-929p-pqhj",
"modified": "2023-09-22T19:50:17Z",
"modified": "2024-05-21T18:20:28Z",
"published": "2023-09-20T06:30:50Z",
"aliases": [
"CVE-2023-43618"
],
"summary": "Croc requires senders to provide local IP addresses in cleartext",
"details": "An issue was discovered in Croc through 9.6.5. The protocol requires a sender to provide its local IP addresses in cleartext via an `ips?` message.",
"details": "An issue was discovered in Croc before 9.6.16. The protocol requires a sender to provide its local IP addresses in cleartext via an `ips?` message.",
"severity": [
{
"type": "CVSS_V3",
@@ -28,7 +28,7 @@
"introduced": "0"
},
{
"last_affected": "9.6.5"
"fixed": "9.6.16"
}
]
}
@@ -44,6 +44,14 @@
"type": "WEB",
"url": "https://github.com/schollz/croc/issues/597"
},
{
"type": "WEB",
"url": "https://github.com/schollz/croc/pull/700"
},
{
"type": "WEB",
"url": "https://github.com/schollz/croc/commit/6f5f16aa1c16b1ec6f31fec35be15de466d9701b"
},
{
"type": "PACKAGE",
"url": "https://github.com/schollz/croc"
advisories/github-reviewed/2023/09/GHSA-8c8w-f7wp-2jr2/GHSA-8c8w-f7wp-2jr2.json
+11 -3
View File
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8c8w-f7wp-2jr2",
"modified": "2023-09-21T17:00:17Z",
"modified": "2024-05-21T18:21:29Z",
"published": "2023-09-20T06:30:50Z",
"aliases": [
"CVE-2023-43616"
],
"summary": "Sender can cause a receiver to overwrite files during ZIP extraction in Croc",
"details": "An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction.",
"details": "An issue was discovered in Croc before 9.6.16. A sender can cause a receiver to overwrite files during ZIP extraction.",
"severity": [
{
"type": "CVSS_V3",
@@ -28,7 +28,7 @@
"introduced": "0"
},
{
"last_affected": "9.6.5"
"fixed": "9.6.16"
}
]
}
@@ -44,6 +44,14 @@
"type": "WEB",
"url": "https://github.com/schollz/croc/issues/594"
},
{
"type": "WEB",
"url": "https://github.com/schollz/croc/pull/698"
},
{
"type": "WEB",
"url": "https://github.com/schollz/croc/commit/4929635eb875d2304e9415b8f4aa62af9e1a2339"
},
{
"type": "PACKAGE",
"url": "https://github.com/schollz/croc"