Lucene search

K
osvGoogleOSV:GHSA-6RVJ-PW9W-JCVC
HistoryNov 19, 2021 - 8:39 p.m.

Information disclosure vulnerability in OnionShare

2021-11-1920:39:35
Google
osv.dev
6
information disclosure
vulnerability
onionshare
remote attackers
non-public node
chat feature
software

EPSS

0.002

Percentile

61.8%

An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature.

EPSS

0.002

Percentile

61.8%