CVE-2021-41867: Information disclosure vulnerability in OnionShare

November 19, 2021

An information disclosure vulnerability in OnionShare allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the –chat feature.

References

github.com/advisories/GHSA-6rvj-pw9w-jcvc
github.com/onionshare/onionshare/compare/v2.3.3...v2.4
nvd.nist.gov/vuln/detail/CVE-2021-41867
www.ihteam.net/advisory/onionshare/

Code Behaviors & Features

Detect and mitigate CVE-2021-41867 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →