PT-2022-15044 · Unknown · Onionshare

Micahflee · Published 2022-01-18 · Updated 2024-06-15 · CVE-2022-21692

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions OnionShare versions prior to the fixed version

Description OnionShare is an open source tool that lets users securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions, anyone with access to the chat environment can write messages disguised as another chat participant. This issue is due to improper access control, allowing an adversary to impersonate existing chat participants and write messages, but not read the conversation.

Recommendations

• Implement proper session handling to prevent unauthorized access to the chat environment.
• As a temporary workaround, consider restricting access to the chat environment until a patch is available.
• Avoid using the update username function to choose an existing username from the chat until the issue is resolved.
• Restrict modification of the chat.js script in the browser's internal debugger to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-21692

GHSA-GJJ5-998G-V36V

OPENSUSE-SU-2024:11983-1

OPENSUSE-SU-2024:13635-1

PYSEC-2022-43

Affected Products

Onionshare

References · 29

• 🔥 https://github.com/onionshare/onionshare/security/advisories/GHSA-gjj5-998g-v36v · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/21xxx/CVE-2022-21692.json · Exploit
• https://osv.dev/vulnerability/PYSEC-2022-43 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-gjj5-998g-v36v · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13635-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-21692 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-21692 · Security Note
• https://cve.org/CVERecord?id=CVE-2022-21692 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-21692 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:11983-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-21692 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21692 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-21692 · Vendor Advisory
• https://github.com/onionshare/onionshare/releases/tag/v2.5 · Note
• https://github.com/onionshare/onionshare · Note