Vulnerabilities > CVE-2021-41867 - Unspecified vulnerability in Onionshare
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
NONE Availability impact
NONE Summary
An information disclosure vulnerability in OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 7 |