{"history":[{"alert":0,"cve":"CVE-2023-43619","id":22491,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00365, \"percentile\": 0.30782}"},{"alert":0,"cve":"CVE-2023-43619","id":20110,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00365, \"percentile\": 0.30637}"},{"alert":0,"cve":"CVE-2023-43619","id":18940,"kind":"epss","observed_at":1794306001,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.00365, \"percentile\": 0.30588}"},{"alert":1,"cve":"CVE-2023-43619","id":18935,"kind":"cna","observed_at":1794306001,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-02T19:44:43.803Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_transferred\"], \"url\": \"https://www.openwall.com/lists/oss-security/2023/09/08/2\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://github.com/schollz/croc/issues/593\"}, {\"name\": \"[oss-security] 20230921 Re: croc: multiple issues in file sharing utility\", \"tags\": [\"mailing-list\", \"x_transferred\"], \"url\": \"http://www.openwall.com/lists/oss-security/2023/09/21/5\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2023-43619\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2024-09-24T19:33:46.913730Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-434\", \"description\": \"CWE-434 Unrestricted Upload of File with Dangerous Type\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2024-09-24T19:34:29.648Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"n/a\", \"vendor\": \"n/a\", \"versions\": [{\"status\": \"affected\", \"version\": \"n/a\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized_keys file.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"n/a\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2023-09-21T23:06:11.048Z\", \"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\"}, \"references\": [{\"url\": \"https://www.openwall.com/lists/oss-security/2023/09/08/2\"}, {\"url\": \"https://github.com/schollz/croc/issues/593\"}, {\"name\": \"[oss-security] 20230921 Re: croc: multiple issues in file sharing utility\", \"tags\": [\"mailing-list\"], \"url\": \"http://www.openwall.com/lists/oss-security/2023/09/21/5\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"assignerShortName\": \"mitre\", \"cveId\": \"CVE-2023-43619\", \"datePublished\": \"2023-09-20T00:00:00.000Z\", \"dateReserved\": \"2023-09-20T00:00:00.000Z\", \"dateUpdated\": \"2024-09-24T19:34:29.648Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"}],"record":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-02T19:44:43.803Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://www.openwall.com/lists/oss-security/2023/09/08/2"},{"tags":["x_transferred"],"url":"https://github.com/schollz/croc/issues/593"},{"name":"[oss-security] 20230921 Re: croc: multiple issues in file sharing utility","tags":["mailing-list","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2023/09/21/5"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2023-43619","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-09-24T19:33:46.913730Z","version":"2.0.3"},"type":"ssvc"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-434","description":"CWE-434 Unrestricted Upload of File with Dangerous Type","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2024-09-24T19:34:29.648Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized_keys file."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2023-09-21T23:06:11.048Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"url":"https://www.openwall.com/lists/oss-security/2023/09/08/2"},{"url":"https://github.com/schollz/croc/issues/593"},{"name":"[oss-security] 20230921 Re: croc: multiple issues in file sharing utility","tags":["mailing-list"],"url":"http://www.openwall.com/lists/oss-security/2023/09/21/5"}]}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2023-43619","datePublished":"2023-09-20T00:00:00.000Z","dateReserved":"2023-09-20T00:00:00.000Z","dateUpdated":"2024-09-24T19:34:29.648Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794435601,"cve":"CVE-2023-43619","description":"An issue was discovered in Croc through 9.6.5. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorized_keys file.","epss":{"date":"2026-11-12","epss":0.00365,"percentile":0.30782},"epss_checked":1794522003,"first_seen":1794290405,"kev":null,"kev_checked":1794522003,"products":"n/a n/a","references":["https://www.openwall.com/lists/oss-security/2023/09/08/2","https://github.com/schollz/croc/issues/593","http://www.openwall.com/lists/oss-security/2023/09/21/5"],"score":null,"solutions":"","state":"PUBLISHED","title":"CVE-2023-43619","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://github.com/advisories/GHSA-x89h-7h96-v88f","id":259,"publisher":"GitHub Advisory Database","title":"croc: Overwrite-confirmation bypass via a crafted \"croc-stdin-\" filename on receive"}]}