Onionshare-cli

This hub aggregates every CVE we track for Onionshare-cli, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 12 most recently published vulnerabilities affecting Onionshare-cli.

• CVE-2022-21694OTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the website3.7Jan 18, 2022
• CVE-2022-21690Cross-Site Scripting in Onionshare8.7Jan 18, 2022
• CVE-2022-21692Improper Access Control in Onionshare4.3Jan 18, 2022
• CVE-2022-21689Denial of Service in Onionshare7.5Jan 18, 2022
• CVE-2022-21693Path traversal in Onionshare6.3Jan 18, 2022
• CVE-2022-21691Improper Access Control in Onionshare4.3Jan 18, 2022
• CVE-2022-21695Improper Access Control in Onionshare4.3Jan 18, 2022
• CVE-2022-21688Out-of-bounds Read in Onionshare7.5Jan 18, 2022
• CVE-2022-21696Username spoofing in OnionShare4.3Jan 18, 2022
• CVE-2021-41867An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat...5.3Oct 4, 2021
• CVE-2021-41868OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.9.8Oct 4, 2021
• CVE-2018-19960The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite file...7.0Dec 7, 2018