What is CVE-2022-21692?

CVE-2022-21692 is a medium-severity vulnerability in Onionshare, classified under Improper Authentication. CVSS score: 4.3/10. Published 2022-01-18.

How severe is CVE-2022-21692?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Auth bypass in Onionshare

CVE-2022-21692

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised as another chat participant.

Vulnerability class: Broken Authentication

EPSS: 0.008 (51.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Onionshare — versions < 2.5

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security-advisories@github.com (Third Party Advisory, x_refsource_MISC, Release Notes)
security-advisories@github.com (x_refsource_CONFIRM, Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2022-21692?: CVE-2022-21692 is a medium-severity vulnerability in Onionshare, classified under Improper Authentication. CVSS score: 4.3/10. Published 2022-01-18.
How severe is CVE-2022-21692?: Medium severity. CVSS v3 base score is 4.3 out of 10.