CVE-2023-43620

CVE-2023-43620 is a high-severity vulnerability affecting Croc versions up to 9.6.5, where a malicious sender can embed ANSI or CSI escape sequences within a filename. This allows an attacker to potentially compromise the terminal device of a receiver upon file transfer. The vulnerability has a CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability, and requires user interaction (UI:R). There is currently no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.