CVE-2022-21696: Username spoofing in OnionShare
(updated )
Between September 26, 2021 and October 8, 2021, Radically Open Security conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund’s Red Team lab. This is an issue from that penetration test.
- Vulnerability ID: OTF-005
- Vulnerability type: Improper Input Sanitization
- Threat level: Low
References
- github.com/advisories/GHSA-68vr-8f46-vc9f
- github.com/onionshare/onionshare
- github.com/onionshare/onionshare/releases/tag/v2.5
- github.com/onionshare/onionshare/security/advisories/GHSA-68vr-8f46-vc9f
- github.com/pypa/advisory-database/tree/main/vulns/onionshare-cli/PYSEC-2022-47.yaml
- nvd.nist.gov/vuln/detail/CVE-2022-21696
Code Behaviors & Features
Detect and mitigate CVE-2022-21696 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →