CVE-2022-0133

peertube is vulnerable to Improper Access Control...

CVE-2022-0133

CVE-2022-0133 affects chocobozzz/peertube. Root cause: improper access control that can expose resources to unauthorized users. Practical impact (supported by connected sources): captions of private PeerTube videos can be fetched by unauthenticated users via the API (e.g., /api/v1/videos/{id}/cap...