Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33870
HistoryJan 24, 2022 - 7:42 a.m.

User Impersonation

2022-01-2407:42:22
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
onionshare_cli
vulnerability
user impersonation
attacker
chat environment
name string manipulation

EPSS

0.001

Percentile

19.4%

onionshare_cli is vulnerable to user impersonation. An attacker with access to the chat environment is able to update the name string to that of another user by appending a space character at the end of it, allowing to impersonate other participants.

EPSS

0.001

Percentile

19.4%