Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-06471
HistoryJan 19, 2022 - 12:00 a.m.

OnionShare input validation error vulnerability

2022-01-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
onionshare
input validation
vulnerability
username
exploit
tor network
chat participant

EPSS

0.001

Percentile

19.4%

OnionShare is an open source tool for securely and anonymously sharing files, hosting websites, and chatting with friends using the Tor network. Used to securely and anonymously share files, host websites, and chat with friends using the Tor network, OnionShare is vulnerable to an input validation error that could be exploited by an attacker to change the username to that of another chat participant via an extra space character at the end of the name string.

EPSS

0.001

Percentile

19.4%