CVE-2016-5026

MEDIUM

Onionshare < 0.9.0 - Improper Access Control

Title source: rule

Description

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory.

References (4)

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 17.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Classification

CWE
CWE-284
Status published

Affected Products (2)

onionshare/onionshare < 0.9.0
n/a/n/a

Timeline

Published Jan 30, 2017
Tracked Since Feb 18, 2026