Junglewise Threat Intelligence
CVE-2023-43616: GO-2023-2071 - Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc
CVE-2023-43616 · Severity: low · CVSS 3.1 · Published 2024-08-21
Technologies: github.com/schollz/croc/v8 (Go), github.com/schollz/croc/v9 (Go), github.com/schollz/croc (Go), github.com/schollz/croc/v6 (Go). Vendors: Go.
Executive brief
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc
Affected products
- Go github.com/schollz/croc/v8
- Go github.com/schollz/croc/v9
- Go github.com/schollz/croc
- Go github.com/schollz/croc/v6