ricochet -- information disclosure

2016-02-15T00:00:00
ID D71831EF-E6F8-11E5-85BE-14DAE9D210B8
Type freebsd
Reporter FreeBSD
Modified 2016-02-15T00:00:00

Description

special reports:

By sending a nickname with some HTML tags in a contact request, an attacker could cause Ricochet to make network requests without Tor after the request is accepted, which would reveal the user's IP address.