### [CVE-2021-41868](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41868) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen) ### Description OnionShare 2.3 before 2.4 allows remote unauthenticated attackers to upload files on a non-public node when using the --receive functionality. ### POC #### Reference - https://www.ihteam.net/advisory/onionshare/ #### Github No PoCs found on GitHub currently.