PT-2018-15176

Name of the Vulnerable Software and Affected Versions OnionShare versions 1.3.1 and earlier Description The issue concerns the debug mode function in web/web.py, which uses the /tmp/onionshare server.log pathname for logging when --debug is enabled. This might allow local users to overwrite files...