CVE-2025-32947

概要

参考情報

• Chocobozzz/PeerTube commit 76226d8 · Patch
• Chocobozzz/PeerTube release v7.1.1 · Release Notes
• research.jfrog.com/vulnerabilities/peertube-activitypub-crawl-dos · Exploit

peertube のその他の脆弱性

• CVE-2025-32949中 6.5This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb.…
• CVE-2025-32948高 7.5The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs …
• CVE-2025-32946中 5.3This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code se…
• CVE-2025-32945中 4.3The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code se…
• CVE-2025-32944中 6.5The vulnerability allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner.  If user import is …