XSS in Onionshare
CVE-2022-21690
OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions The path parameter of the requested URL is not sanitized before being passed to the QT frontend. This path is used in all components for displaying the server access history. This leads to a rendered HTML4 Subset (QT RichText editor) in the Onionshare frontend.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.008 (52.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N.
Affected products
- Onionshare — versions < 2.5
Weakness classification (CWE)
References
- security-advisories@github.com (Third Party Advisory, x_refsource_MISC, Release Notes)
- security-advisories@github.com (x_refsource_CONFIRM, Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-21690?
- CVE-2022-21690 is a high-severity vulnerability in Onionshare, classified under Cross-site Scripting. CVSS score: 8.7/10. Published 2022-01-18.
- How severe is CVE-2022-21690?
- High severity. CVSS v3 base score is 8.7 out of 10.