CVE-2022-21692

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions anyone with access to the chat environment can write messages disguised as another chat participant.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Jan 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-216936.5OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216945.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216955.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216964.3OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor netCVE-2022-216977.1Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulneCVE-2022-216987.5client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package in client_golang provides tooling aCVE-2022-216998.8IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the PyCVE-2022-21704.8The Microsoft Advertising Universal Event Tracking (UET) WordPress plugin before 1.0.4 does not sanitise and escape its settings, allowing hCVE-2022-217005.3Micronaut is a JVM-based, full stack Java framework designed for building JVM web applications with support for Java, Kotlin and the Groovy CVE-2022-217018.8Istio is an open platform to connect, manage, and secure microservices. In versions 1.12.0 and 1.12.1 Istio is vulnerable to a privilege escCVE-2022-217025.4Grafana is an open-source platform for monitoring and observability. In affected versions an attacker could serve HTML content thru the GrafCVE-2022-217038.8Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a cross site request forgery vulnerabi