CVE-2018-19960 Path traversal in n/a

What is CVE-2018-19960?

CVE-2018-19960 is a high-severity path traversal vulnerability in n/a, published on 7 Dec 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The debug_mode function in web/web.py in OnionShare through 1.3.1, when --debug is enabled, uses the /tmp/onionshare_server.log pathname for logging, which might allow local users to overwrite files or obtain sensitive information by using this pathname.

Weakness: CWE-20

Which versions are affected by CVE-2018-19960?

It affects 1 product.

Products include Onionshare Onionshare.

How do I fix CVE-2018-19960?

Apply the vendor's patch.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2018-19960 being exploited?

There is no known exploitation of CVE-2018-19960 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-41868 Remote unauthenticated attackers able to upload files in Onionshare Critical 9.8
• CVE-2022-21690 Cross-Site Scripting in Onionshare High 8.7
• CVE-2022-21688 Out-of-bounds Read in Onionshare High 7.5
• CVE-2022-21689 Denial of Service in Onionshare High 7.5
• CVE-2022-21693 Path traversal in Onionshare Medium 6.3

Sources

• CVE record
• NVD
• OSV
• How this page is made

Also known as DEBIAN-CVE-2018-19960, UBUNTU-CVE-2018-19960, openSUSE-SU-2024:11246-1.