Lucene search
Q5caF2A003FC-B911-43B6-81EC-F856CDFEAEFCHistoryJan 08, 2022 - 3:40 p.m.
Improper Access Control in chocobozzz/peertube
2022-01-0815:40:39
q5ca
www.huntr.dev
11
0.001 Low
EPSS
Percentile
19.4%
Description
Unauthenticated users can obtain comments on private videos
Proof of Concept
Vísit the following API link where 123 is the ID of the private video:
/api/v1/videos/123/comment-threads
Response contains all the comments on that private video.
Impact
This vulnerability disclosure comments on private videos to unauthenticated users.
Related
prion
prion
Improper access control
2022-01-11 16:15:00
osv
osv
CVE-2022-0170
2022-01-11 16:15:07
nvd
nvd
CVE-2022-0170
2022-01-11 16:15:07
cve
cve
CVE-2022-0170
2022-01-11 16:15:07
cnvd
cnvd
peertube access control error vulnerability
2022-01-13 00:00:00
cvelist
cvelist
CVE-2022-0170 Improper Access Control in chocobozzz/peertube
2022-01-11 15:20:12