PyPI/onionshare-cli CVE-2022-21694: low 3.7, EPSS 1.26%

Incorrect Permission Assignment for Critical Resource in OnionShare

Action: Upgrade onionshare-cli to 2.5 or later.

pip install onionshare-cli==2.5

Affected

Fixed versions

Sources

• osv: GHSA-h29c-wcm8-883h
• https://github.com/onionshare/onionshare/security/advisories/GHSA-h29c-wcm8-883h
• https://nvd.nist.gov/vuln/detail/CVE-2022-21694
• https://github.com/onionshare/onionshare/issues/1389
• https://github.com/onionshare/onionshare
• https://github.com/onionshare/onionshare/releases/tag/v2.5
• https://github.com/pypa/advisory-database/tree/main/vulns/onionshare-cli/PYSEC-2022-45.yaml

CVE-2022-21694 · published 2022-01-21T23:20:17Z · modified 2024-10-07T21:27:23.951454Z · JSON