Improper Access Control

2022-01-2007:12:12

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

improper access control

onionshare_cli

tor

vulnerability

remote attacker

javascript

external resources

EPSS

0.001

Percentile

41.6%

JSON

onionshare_cli is vulnerable to improper access control. The vulnerability allows a remote unauthenticated attacker to inject javascript or other external resources like fonts or images via Tor network because it is not possible to configure this CSP for individual pages.