CVE-2022-0132

peertube is vulnerable to Server-Side Request Forgery (SSRF)

• CWE-918
• CWE-918

• https://github.com/chocobozzz/peertube/commit/7b54a81cccf6b4c12269e9d6897d608b1a99537aPatch, Third Party Advisory
• https://huntr.dev/bounties/77ec5308-5561-4664-af21-d780df2d1e4bExploit, Third Party Advisory
• https://github.com/chocobozzz/peertube/commit/7b54a81cccf6b4c12269e9d6897d608b1a99537aPatch, Third Party Advisory
• https://huntr.dev/bounties/77ec5308-5561-4664-af21-d780df2d1e4bExploit, Third Party Advisory

Published

Jan 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0124An issue has been discovered affecting GitLab versions prior…4.3
• CVE-2022-0125An issue has been discovered in GitLab affecting all version…4.3
• CVE-2022-0128vim is vulnerable to Out-of-bounds Read7.8
• CVE-2022-0129Uncontrolled search path element vulnerability in McAfee Tec…6.7
• CVE-2022-0130Tenable.sc versions 5.14.0 through 5.19.1 were found to cont…8.1
• CVE-2022-0131Jimoty App for Android versions prior to 3.7.42 uses a hard-…3.3
• CVE-2022-0133peertube is vulnerable to Improper Access Control7.5
• CVE-2022-0134The AnyComment WordPress plugin before 0.2.18 does not have …8.8
• CVE-2022-0135An out-of-bounds write issue was found in the VirGL virtual …7.8
• CVE-2022-0136A vulnerability was discovered in GitLab versions 10.5 to 14…8.1
• CVE-2022-0137A heap buffer overflow in image_set_mask function of HTMLDOC…5.5
• CVE-2022-0138MMP: All versions prior to v1.0.3, PTP C-series: Device vers…7.5