Ubuntu: Security Advisory (USN-7625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-19960

The debugmode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshareserver.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname...

CVE-2018-19960

OnionShare up to version 1.3.1 is affected by CVE-2018-19960: its debug_mode path /tmp/onionshare_server.log for logging can allow a local attacker to overwrite files or access sensitive information. Root cause: debug logging uses a fixed pathname, enabling local path traversal/overwrite scenario...