Server-Side Request Forgery in @peertube/embed-api

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-0508 · ADVISORY
• chocobozzz/peertube commit f33e515 · WEB
• chocobozzz/peertube · PACKAGE
• huntr.dev/bounties/c3724574-b6c9-430b-849b-40dd2b20f23c · WEB

peertube のその他の脆弱性

• CVE-2025-32949中 6.5This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb.…
• CVE-2025-32948高 7.5The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs …
• CVE-2025-32947高 7.5This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" en…
• CVE-2025-32946中 5.3This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code se…
• CVE-2025-32945中 4.3The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code se…