Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2024-4602

Disclosure Date: July 13, 2024 (last updated July 13, 2024)
The Embed Peertube Playlist WordPress plugin before 1.10 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
0
Attacker Value
Unknown

CVE-2022-0881

Disclosure Date: March 09, 2022 (last updated February 23, 2025)
Insecure Storage of Sensitive Information in GitHub repository chocobozzz/peertube prior to 4.1.1.
Attacker Value
Unknown

CVE-2022-0727

Disclosure Date: February 23, 2022 (last updated February 23, 2025)
Improper Access Control in GitHub repository chocobozzz/peertube prior to 4.1.0.
Attacker Value
Unknown

CVE-2022-0726

Disclosure Date: February 23, 2022 (last updated February 23, 2025)
Missing Authorization in GitHub repository chocobozzz/peertube prior to 4.1.0.
Attacker Value
Unknown

CVE-2022-0508

Disclosure Date: February 08, 2022 (last updated February 23, 2025)
Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832
Attacker Value
Unknown

CVE-2022-0170

Disclosure Date: January 11, 2022 (last updated February 23, 2025)
peertube is vulnerable to Improper Access Control
Attacker Value
Unknown

CVE-2021-3780

Disclosure Date: September 15, 2021 (last updated February 23, 2025)
peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')