Lucene search
GoogleOSV:PYSEC-2022-41HistoryJan 18, 2022 - 11:15 p.m.
PYSEC-2022-41
2022-01-1823:15:00
Google
osv.dev
6
onionshare
secure file sharing
tor network
unsanitized path
html4 subset
frontend
affected versions
EPSS
0.001
Percentile
21.4%
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the requested URL is not sanitized before being passed to the QT frontend. This path is used in all components for displaying the server access history. This leads to a rendered HTML4 Subset (QT RichText editor) in the Onionshare frontend.
Related
debiancve
debiancve
CVE-2022-21690
2022-01-18 23:15:08
ubuntucve
ubuntucve
CVE-2022-21690
2022-01-18 00:00:00
osv
osv
OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the QT frontend
2022-01-21 23:20:25
CVE-2022-21690
2022-01-18 23:15:08
python-onionshare-2.5-1.1 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2022-21690 Cross-Site Scripting in Onionshare
2022-01-18 22:15:18
github
github
prion
prion
Design/Logic Flaw
2022-01-18 23:15:00
cnvd
cnvd
OnionShare has an unspecified vulnerability (CNVD-2022-06477)
2022-01-19 00:00:00
cve
cve
CVE-2022-21690
2022-01-18 23:15:08
veracode
veracode
Information Disclosure
2022-11-16 00:19:35
nvd
nvd
CVE-2022-21690
2022-01-18 23:15:08