CVE-2022-21694

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. The website mode of the onionshare allows to use a hardened CSP, which will block any scripts and external resources. It is not possible to configure this CSP for individual pages and therefore the security enhancement cannot be used for websites using javascript or external resources like fonts or images.
Severity
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Atk. Vector
NETWORK
Atk. Complexity
LOW
Priv. Required
NONE
Base Score
CVSS 3.x
EPSS Score
Percentile: 45%
VendorProductVersion
onionshareonionshare
𝑥
< 2.5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
onionshare
bullseye
vulnerable
buster
not-affected
bookworm
2.6-5~deb12u1
fixed
trixie
2.6.2-2
fixed
sid
2.6.2-3
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
onionshare
noble
needs-triage
mantic
ignored
lunar
ignored
kinetic
dne
jammy
needs-triage
impish
ignored
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
trusty
ignored