Framasoft

16 CVEs across 2 Framasoft products. Browse Framasoft vulnerabilities, severities, and proof-of-concept exploits.

Framasoft products with known CVEs

ProductCVEs
Peertube15
Framadate1
Framasoft CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-32949Medium6.52025-04-15This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb. If user import i…
CVE-2025-32948High7.52025-04-15The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF). Attac…
CVE-2025-32947High7.52025-04-15This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receivi…
CVE-2025-32946Medium5.32025-04-15This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code sets the owner of the…
CVE-2025-32945Medium4.32025-04-15The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code sets the owner of the…
CVE-2025-32944Medium6.52025-04-15The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner.  If user import is enabled (which is t…
CVE-2025-32943Low3.72025-04-15The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path traversal in the HLS end…
CVE-2022-0881Medium6.52022-03-09Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1.
CVE-2022-0727Medium5.42022-02-23Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.
CVE-2022-0726Medium5.42022-02-23Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.
CVE-2022-0508Medium5.32022-02-08Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832
CVE-2022-0170Medium4.32022-01-11peertube is vulnerable to Improper Access Control
CVE-2022-0133High7.52022-01-10peertube is vulnerable to Improper Access Control
CVE-2022-0132High7.52022-01-10peertube is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2021-3780Medium6.12021-09-15peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-1000039Critical9.82017-07-17Framadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible Information Disclosure and Code Execution