Authentication Bypass

2022-01-2014:56:06

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

onionshare_cli

authentication bypass

chat_mode

chat sessions

attacker

impersonate.

EPSS

0.001

Percentile

21.4%

JSON

onionshare_cli is vulnerable to authentication bypass. The vulnerability exists in chat_mode.py because the chat sessions are not handled with proper validations which allows an attacker to access the chat environment, impersonate existing chat participants and write messages.