Debian/onionshare: high 7
The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files o
Action: Upgrade onionshare to 1.3.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2-1 | - |
Fixed versions
| 1.3.2-1 |
Sources
- osv: DEBIAN-CVE-2018-19960#Debian:14/onionshare
- https://security-tracker.debian.org/tracker/CVE-2018-19960
published · modified · JSON