Server-Side Request Forgery in @peertube/embed-api

MEDIO 5.3CVE-2022-0508 · GHSA-mv26-cx23-vrfg · Published 08/02/2022 · updated 17/06/2026

En resumen

CVE-2022-0508 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a peertube (framasoft), @peertube/embed-api.
Probabilidad de explotación en los próximos 30 días (EPSS): 0.89%, mayor que el 59.5% de las vulnerabilidades.
Solución: actualizar a 2021-12-13, 4.1.0-rc.1 o posterior.

Package	Affected versions	Patched versions
peertube framasoft	`< 2021-12-13`	`2021-12-13`
@peertube/embed-api npm	`< 4.1.0-rc.1`	`4.1.0-rc.1`

@peertube/embed-api version 4.0.0 and prior is vulnerable to server-side request forgery.

NVD description

Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 2021-12-13

2021-12-13

npm

< 4.1.0-rc.1

4.1.0-rc.1

Más vulnerabilidades de peertube

Ver todo →