CVE-2022-21690
2 advisories.
PyPI/onionshare-cli CVE-2022-21690: high 8.7, EPSS 0.80%
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend
Action: Upgrade onionshare-cli to 2.5 or later.
pip install onionshare-cli==2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5 | - |
Fixed versions
| 2.5 |
Sources
- osv: GHSA-ch22-x2v3-v6vq
- https://github.com/onionshare/onionshare/security/advisories/GHSA-ch22-x2v3-v6vq
- https://nvd.nist.gov/vuln/detail/CVE-2022-21690
- https://github.com/onionshare/onionshare
- https://github.com/onionshare/onionshare/releases/tag/v2.5
- https://github.com/pypa/advisory-database/tree/main/vulns/onionshare-cli/PYSEC-2022-41.yaml
CVE-2022-21690 · published · modified · JSON
PyPI/onionshare-cli CVE-2022-21690: unknown, EPSS 0.80%
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the request
Action: Upgrade onionshare-cli to 2.5 or later.
pip install onionshare-cli==2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5 | - |
Fixed versions
| 2.5 |
Sources
- osv: PYSEC-2022-41
- https://github.com/onionshare/onionshare/security/advisories/GHSA-ch22-x2v3-v6vq
- https://github.com/onionshare/onionshare/releases/tag/v2.5
CVE-2022-21690 · published · modified · JSON