Most recent entries from all

cnvd-2022-06477

EUVD-2026-232841

fkie_cve-2022-21690

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the requested URL is not sanitized before being passed to the QT frontend. This path is used in all components for displaying the server access history. This leads to a rendered HTML4 Subset (QT RichText editor) in the Onionshare frontend.

GHSA-ch22-x2v3-v6vq — OTF-001: Improper Input Sanitation: The path parameter of the requested URL is not sanitized before being passed to the…

Affected: PyPI: onionshare-cli

Between September 26, 2021 and October 8, 2021, [Radically Open Security](https://www.radicallyopensecurity.com/) conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund's [Red Team lab](https://www.opentech.fund/labs/red-team-lab/). This is an issue from that penetration test.

- Vulnerability ID: OTF-001 - Vulnerability type: Improper Input Sanitization - Threat level: Elevated

## Description:

The `path` parameter of the requested URL is not sanitized before being passed to the QT frontend.

## Technical description:

The `path` parameter is not sanitized before being passed to the constructor of the `QLabel`.

https://github.com/onionshare/onionshare/blob/d08d5f0f32f755f504494d80794886f346fbafdb/desktop/src/onionshare/tab/mode/__init__.py#L499-L509

https://github.com/onionshare/onionshare/blob/d08d5f0f32f755f504494d80794886f346fbafdb/desktop/src/onionshare/tab/mode/history.py#L456-L483

https://doc.qt.io/qt-5/qlabel.html#details

> Warning: When passing a QString to the constructor or calling setText(), make sure to sanitize your input, as QLabel tries to guess whether it displays the text as plain text or as rich text, a subset of HTML 4 markup. You may want to call setTextFormat() explicitly, e.g. in case you expect the text to be in plain format but cannot control the text source (for instance when displaying data loaded from the Web).

This path is used in all components for displaying the server access history. This leads to a rendered H…

gsd-2022-21690

openSUSE-SU-2024:11983-1 — python-onionshare-2.5-1.1 on GA media

python-onionshare-2.5-1.1 on GA media

PYSEC-2022-41

Affected: PyPI: onionshare-cli

Withdrawn: UBUNTU-CVE-2022-21690

Withdrawn by the publisher.

Affected: Ubuntu:24.04:LTS: onionshare, Ubuntu:25.04: onionshare