CVE-2022-21689: Denial of Service in Onionshare
(updated )
Between September 26, 2021 and October 8, 2021, Radically Open Security conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund’s Red Team lab.
- Vulnerability ID: OTF-012
- Vulnerability type: Denial of Service
- Threat level: Moderate
References
- github.com/advisories/GHSA-jh82-c5jw-pxpc
- github.com/onionshare/onionshare
- github.com/onionshare/onionshare/releases/tag/v2.5
- github.com/onionshare/onionshare/security/advisories/GHSA-jh82-c5jw-pxpc
- github.com/pypa/advisory-database/tree/main/vulns/onionshare-cli/PYSEC-2022-40.yaml
- nvd.nist.gov/vuln/detail/CVE-2022-21689
Code Behaviors & Features
Detect and mitigate CVE-2022-21689 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →