Most recent entries from all

cnvd-2022-06478

EUVD-2026-232842

fkie_cve-2022-21692

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised as another chat participant.

GHSA-gjj5-998g-v36v — Improper Access Control in Onionshare

Affected: PyPI: onionshare-cli

Between September 26, 2021 and October 8, 2021, [Radically Open Security](https://www.radicallyopensecurity.com/) conducted a penetration test of OnionShare 2.4, funded by the Open Technology Fund's [Red Team lab](https://www.opentech.fund/labs/red-team-lab/). This is an issue from that penetration test.

- Vulnerability ID: OTF-003 - Vulnerability type: Improper Access Control - Threat level: Moderate

## Description:

Anyone with access to the chat environment can write messages disguised as another chat participant.

## Technical description:

Prerequisites:

- Alice and Bob are legitimate users - A third user has access to the chat environment

![otf-003-a](https://user-images.githubusercontent.com/156128/140665707-1ecc897e-d33b-4f5b-b585-eb4475c1599f.png)

This screenshot shows Alice (`glimpse-depress`) and Bob (`blinker-doorpost`) joined a chatroom and are the only participants in the chatroom. Then the non-listed user squad-nursing writes a message in the chatroom without being visible in the list of users. The sending of the message itself is not required but was done here to show the initial access. The non-listed participant now renames himself to Bob and writes another message, seemingly coming from Bob.

This can be reproduced by slightly modifying the client-side JavaScript. The `joined` emit needs to be removed from the `socket.on(connect) `event handler. Therefore a client is not listed in the userlist and has no active session.

https://github.com/onionshare/…

gsd-2022-21692

openSUSE-SU-2024:11983-1 — python-onionshare-2.5-1.1 on GA media

python-onionshare-2.5-1.1 on GA media

PYSEC-2022-43

Affected: PyPI: onionshare-cli

Withdrawn: UBUNTU-CVE-2022-21692

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: onionshare, Ubuntu:24.04:LTS: onionshare, Ubuntu:25.04: onionshare