PyPI/onionshare-cli CVE-2021-41868: critical 9.8, EPSS 2.42%
Remote unauthenticated attackers able to upload files in Onionshare
Action: Upgrade onionshare-cli to 2.4 or later.
pip install onionshare-cli==2.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.3 | 2.4 | - |
Fixed versions
| 2.4 |
Sources
- osv: GHSA-7g47-xxff-9p85
- https://nvd.nist.gov/vuln/detail/CVE-2021-41868
- https://github.com/onionshare/onionshare/issues/1396
- https://github.com/onionshare/onionshare/pull/1404
- https://github.com/onionshare/onionshare
- https://www.ihteam.net/advisory/onionshare
CVE-2021-41868 · published · modified · JSON