Cros secrets may be disclosed to untrusted relay
Moderate severity
GitHub Reviewed
Published
Sep 20, 2023
to the GitHub Advisory Database
•
Updated May 21, 2024
Description
Published by the National Vulnerability Database
Sep 20, 2023
Published to the GitHub Advisory Database
Sep 20, 2023
Reviewed
Sep 21, 2023
Last updated
May 21, 2024
An issue was discovered in Croc before 9.6.16. When a custom shared secret is used, the sender and receiver may divulge parts of this secret to an untrusted Relay, as part of composing a room name.
References