Vulnerabilities in onionshare

11 results

Vexday analysis

OnionShare apresenta um perfil de risco moderado com 9 vulnerabilidades catalogadas, nenhuma atualmente sob exploração ativa. A ausência de vulnerabilidades críticas e de publicações recentes indica que o risco está estabilizado, porém a fraqueza dominante em autenticação improprópria (CWE-287) merece monitoramento contínuo em ambientes que dependem dessa camada de segurança.

CVE-2022-21689HIGHDenial of Service in OnionshareEPSS 1.4%CVE-2022-21694LOWOTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the websiteEPSS 1.3%CVE-2022-21693MEDIUMPath traversal in OnionshareEPSS 1.2%CVE-2022-21695MEDIUMImproper Access Control in OnionshareEPSS 0.9%CVE-2022-21690HIGHCross-Site Scripting in OnionshareEPSS 0.8%CVE-2022-21688HIGHOut-of-bounds Read in OnionshareEPSS 0.8%CVE-2022-21692MEDIUMImproper Access Control in OnionshareEPSS 0.8%CVE-2022-21696MEDIUMUsername spoofing in OnionShareEPSS 0.7%CVE-2022-21691MEDIUMImproper Access Control in OnionshareEPSS 0.7%CVE-2026-54706MEDIUMOnionShare follows symlinks in shared directories, allowing unintended disclosure of local filesEPSS 0.3%CVE-2026-54707MEDIUMOnionShare Receive mode writes uploaded files even when file uploads are disabledEPSS 0.3%