Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tor官方目录查询请求敏感信息泄露漏洞
Vulnerability Description
Tor(The Onion Router)是第二代洋葱路由的一种实现,用户通过Tor可以在因特网上进行匿名交流。 如果用户向网桥目录权威提交了特制的查询请求,允许远程攻击者获取敏感信息。官方目录会在dbg-stability.txt的响应中泄露所有追踪的网桥身份,这是一种信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A