Cross-site Scripting in peertube

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-3780 · ADVISORY
• chocobozzz/peertube commit 0ea2f79 · WEB
• chocobozzz/peertube · PACKAGE
• huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65 · WEB

Lỗ hổng khác của peertube

• CVE-2025-32949TRUNG BÌNH 6.5This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb.…
• CVE-2025-32948CAO 7.5The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs …
• CVE-2025-32947CAO 7.5This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" en…
• CVE-2025-32946TRUNG BÌNH 5.3This vulnerability allows any attacker to add playlists to a different user’s channel using the ActivityPub protocol. The vulnerable code se…
• CVE-2025-32945TRUNG BÌNH 4.3The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code se…