CVE-2022-0726 Missing Authorization in chocobozzz/peertube

Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0...

PeerTube 访问控制错误漏洞

PeerTube is a decentralized video sharing service platform. Peertube has an access control error vulnerability that stems from the product's failure to effectively check the status of videos, which could be exploited by attackers to increase the number of likes that modify private videos...

PT-2022-13392 · Peertube · Peertube

Name of the Vulnerable Software and Affected Versions: peertube versions prior to 4.1.0 Description: The issue concerns a missing authorization in the GitHub repository chocobozzz/peertube. This is also referred to as an improper authorization. No information is provided about the estimated numbe...

PeerTube 授权问题漏洞

PeerTube is a decentralized video sharing service platform. It is used to create video projects. versions of PeerTube prior to 4.1.0 contain an authorization issue vulnerability that can be exploited by attackers to create new comments or reply to comments in private videos...

CVE-2022-0726 Missing Authorization in chocobozzz/peertube

Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0...

CVE-2022-0726

CVE-2022-0726 concerns PeerTube versions prior to 4.1.0 with a missing/improper authorization issue in the chocobozzz/peertube repository. The connected documents specify that unauthenticated or insufficiently authorized actions allow attackers to interact with private videos by creating new comm...

Improper Authorization in chocobozzz/peertube

Description The app doesn't check the status of video when making data changes. Normal users can create new comment or reply comment in private videos. Proof of Concept note: I'm using instance p.lu for testing - Step 1: Login as video test1 and upload private video. Get video ID of private video...

PeerTube Server-Side Request Forgery Vulnerability (CNVD-2022-18320)

PeerTube is a decentralized video sharing service platform. PeerTube suffers from a server-side request forgery vulnerability, which stems from the product's failure to determine that requests originate from trusted users, and can be exploited by attackers to send unintended requests to the serve...

GHSA-MV26-CX23-VRFG Server-Side Request Forgery in @peertube/embed-api

@peertube/embed-api version 4.0.0 and prior is vulnerable to server-side request forgery...

Server-Side Request Forgery in @peertube/embed-api

@peertube/embed-api version 4.0.0 and prior is vulnerable to server-side request forgery...

CVE-2022-0508

Server-Side Request Forgery SSRF in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832...

CVE-2022-0508

Server-Side Request Forgery SSRF in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832...

CVE-2022-0508 Server-Side Request Forgery (SSRF) in chocobozzz/peertube

Server-Side Request Forgery SSRF in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832...

CVE-2022-0508

PeerTube (chocobozzz/peertube) is affected by a Server-Side Request Forgery (SSRF) vulnerability described in CVE-2022-0508, stemming from insufficient verification of request origin for server-side requests prior to the commit f33e515991a32885622b217bf2ed1d1b0d9d6832. Connected sources (Red Hat,...

CVE-2022-0508 Server-Side Request Forgery (SSRF) in chocobozzz/peertube

Server-Side Request Forgery SSRF in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832...

PeerTube 代码问题漏洞

PeerTube is a decentralized video sharing service platform. PeerTube suffers from a server-side request forgery vulnerability, which stems from the product's failure to determine that requests originate from trusted users, and can be exploited by attackers to send unintended requests to the serve...

Server-Side Request Forgery (SSRF) in chocobozzz/peertube

Description First of all, Thanks to my friend Haxatron for his excellent report I read the fix commit, and I found out that the code only Checked the IP addresses and didn't check the domain names that refer to a private IP address Steps to reproduce first, set up a local server at 127.0.0.2:8000...

PeerTube server-side request forgery vulnerability

PeerTube is a decentralized video sharing service platform. PeerTube suffers from a server-side request forgery vulnerability that stems from the product's failure to properly validate user input, which can be exploited by attackers to probe server intranet resources...

PeerTube Access Control Error Vulnerability (CNVD-2022-18322)

PeerTube is a decentralized video sharing service platform. Used to produce video projects, PeerTube suffers from an access control error vulnerability that stems from a network system or product that does not properly restrict access to resources from unauthorized roles, which could be exploited...