First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2021-41868

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/onionshare/onionshare/compare/v2.3.3...v2.4Patch, Third Party Advisory
https://www.ihteam.net/advisory/onionshare/Exploit, Third Party Advisory
https://github.com/onionshare/onionshare/compare/v2.3.3...v2.4Patch, Third Party Advisory
https://www.ihteam.net/advisory/onionshare/Exploit, Third Party Advisory

Timeline

Published: Oct 4, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-418698.8SuiteCRM 7.10.x before 7.10.33 and 7.11.x before 7.11.22 is vulnerable to privilege escalation.CVE-2021-41877.8vim is vulnerable to Use After Free CVE-2021-418708.8An issue was discovered in the firmware update form in Socomec REMOTE VIEW PRO 2.0.41.4. An authenticated attacker can bypass a client-side CVE-2021-418715.4An issue was discovered in Socomec REMOTE VIEW PRO 2.0.41.4. Improper validation of input into the username field makes it possible to place CVE-2021-418727.5Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a d CVE-2021-4187310.0Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vuln CVE-2021-418786.1A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker CVE-2021-41887.5mruby is vulnerable to NULL Pointer Dereference CVE-2021-41895.3A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP CVE-2021-41907.5Large loop in the Kafka dissector in Wireshark 3.6.0 allows denial of service via packet injection or crafted capture file CVE-2021-41915.3An issue has been discovered in GitLab CE/EE affecting versions 13.0 to 14.6.5, 14.7 to 14.7.4, and 14.8 to 14.8.2. Private GitLab instances CVE-2021-419168.8A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrati