CVE-2022-21692: Improper Access Control in Onionshare
(updated )
Between September 26, 2021 and October 8, 2021, Radically Open Security conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund’s Red Team lab. This is an issue from that penetration test.
- Vulnerability ID: OTF-003
- Vulnerability type: Improper Access Control
- Threat level: Moderate
References
- github.com/advisories/GHSA-gjj5-998g-v36v
- github.com/onionshare/onionshare
- github.com/onionshare/onionshare/releases/tag/v2.5
- github.com/onionshare/onionshare/security/advisories/GHSA-gjj5-998g-v36v
- github.com/pypa/advisory-database/tree/main/vulns/onionshare-cli/PYSEC-2022-43.yaml
- nvd.nist.gov/vuln/detail/CVE-2022-21692
Code Behaviors & Features
Detect and mitigate CVE-2022-21692 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →