CVE-2022-21695

Опубликовано: 18 янв. 2022

Источник: nvd

CVSS3: 4.3

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions authenticated users (or unauthenticated in public mode) can send messages without being visible in the list of chat participants. This issue has been resolved in version 2.5.

Ссылки

https://github.com/onionshare/onionshare/releases/tag/v2.5
Release Notes
Third Party Advisory
https://github.com/onionshare/onionshare/security/advisories/GHSA-99p8-9p2c-49j4
Third Party Advisory
https://github.com/onionshare/onionshare/releases/tag/v2.5
Release Notes
Third Party Advisory
https://github.com/onionshare/onionshare/security/advisories/GHSA-99p8-9p2c-49j4
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:onionshare:onionshare:*:*:*:*:*:*:*:*

Версия до 2.5 (исключая)

EPSS

Процентиль: 51%

0.00278

Низкий

4.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2022-21695

CVSS3: 4.3

ubuntu

около 4 лет назад

CVE-2022-21695

CVSS3: 4.3

debian

около 4 лет назад

OnionShare is an open source tool that lets you securely and anonymous ...

GHSA-99p8-9p2c-49j4

CVSS3: 4.3

github

около 4 лет назад

Improper Access Control in Onionshare

EPSS

Процентиль: 51%

0.00278

Низкий

4.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287