Framasoft Peertube
15 CVEs affecting Framasoft Peertube. Latest disclosed: 2025-04-15. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-32948 | High | 7.5 | 2025-04-15 | The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF). Attac… |
CVE-2025-32947 | High | 7.5 | 2025-04-15 | This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receivi… |
CVE-2022-0133 | High | 7.5 | 2022-01-10 | peertube is vulnerable to Improper Access Control |
CVE-2022-0132 | High | 7.5 | 2022-01-10 | peertube is vulnerable to Server-Side Request Forgery (SSRF) |
CVE-2025-32949 | Medium | 6.5 | 2025-04-15 | This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb. If user import i… |
CVE-2025-32944 | Medium | 6.5 | 2025-04-15 | The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner. If user import is enabled (which is t… |
CVE-2022-0881 | Medium | 6.5 | 2022-03-09 | Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1. |
CVE-2021-3780 | Medium | 6.1 | 2021-09-15 | peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
CVE-2022-0727 | Medium | 5.4 | 2022-02-23 | Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0. |
CVE-2022-0726 | Medium | 5.4 | 2022-02-23 | Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0. |
CVE-2025-32946 | Medium | 5.3 | 2025-04-15 | This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code sets the owner of the… |
CVE-2022-0508 | Medium | 5.3 | 2022-02-08 | Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832 |
CVE-2025-32945 | Medium | 4.3 | 2025-04-15 | The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code sets the owner of the… |
CVE-2022-0170 | Medium | 4.3 | 2022-01-11 | peertube is vulnerable to Improper Access Control |
CVE-2025-32943 | Low | 3.7 | 2025-04-15 | The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path traversal in the HLS end… |