CVE-2022-21689: falha de alta gravidade em onionshare
Denial of Service in Onionshare
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 1.3%
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions the receive mode limits concurrent uploads to 100 per second and blocks other uploads in the same second, which can be triggered by a simple script. An adversary with access to the receive mode can block file upload for others. There is no way to block this attack in public mode due to the anonymity properties of the tor network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
onionshare · onionshareCVEs relacionadas — onionshare
No mesmo produto, das mais perigosas para as menos.
CVE-2022-21694LOWOTF-006: Broken Website Hardening Control: The CSP can be turned on or off but not configured for the specific needs of the websiteEPSS 1.3%CVE-2022-21693MEDIUMPath traversal in OnionshareEPSS 1.2%CVE-2022-21688HIGHOut-of-bounds Read in OnionshareEPSS 0.9%CVE-2022-21695MEDIUMImproper Access Control in OnionshareEPSS 0.9%CVE-2022-21690HIGHCross-Site Scripting in OnionshareEPSS 0.8%CVE-2022-21692MEDIUMImproper Access Control in OnionshareEPSS 0.8%