Lucene search
Veracode Vulnerability DatabaseVERACODE:33872HistoryJan 24, 2022 - 8:19 a.m.
Invisible Chat Participant
2022-01-2408:19:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
onionshare-cli
invisible chat participants
lack of secure validation
chat environment
EPSS
0.001
Percentile
26.2%
onionshare-cli allows invisible chat participants. Any user (public or authenticated) is able to send chats without being visible in the chat list due to lack of secure validation of active users in a chat environment session.
Related
ubuntucve
ubuntucve
CVE-2022-21695
2022-01-18 00:00:00
osv
osv
Improper Access Control in Onionshare
2022-01-21 23:20:16
CVE-2022-21695
2022-01-18 22:15:08
PYSEC-2022-46
2022-01-18 22:15:00
debiancve
debiancve
CVE-2022-21695
2022-01-18 22:15:08
cve
cve
CVE-2022-21695
2022-01-18 22:15:08
cvelist
cvelist
CVE-2022-21695 Improper Access Control in Onionshare
2022-01-18 21:55:10
cnvd
cnvd
OnionShare has an unspecified vulnerability (CNVD-2022-06476)
2022-01-19 00:00:00
github
github
Improper Access Control in Onionshare
2022-01-21 23:20:16
nvd
nvd
CVE-2022-21695
2022-01-18 22:15:08
prion
prion
Design/Logic Flaw
2022-01-18 22:15:00