CVE-2022-21692

Katalog CVE

CVSS 4.3 · Medium EPSS 0,78%

Kerentanan Improper Authentication pada onionshare. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised as another chat participant.

Rincian

Terbit di NVD

18 Januari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

0,78% peluang dieksploitasi; lebih tinggi dari 54,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/onionshare/onionshare/releases/tag/v2.5 release notes · advisory pihak ketiga
• https://github.com/onionshare/onionshare/security/advisories/GHSA-gjj5-998g-v36v exploit · advisory pihak ketiga