CVE-2022-0133

peertube is vulnerable to Improper Access Control

• CWE-284

• https://github.com/chocobozzz/peertube/commit/795212f7acc690c88c86d0fab8772f6564d59cb8Patch, Third Party Advisory
• https://huntr.dev/bounties/80aabdc1-89fe-47b8-87ca-9d68107fc0b4Exploit, Third Party Advisory
• https://github.com/chocobozzz/peertube/commit/795212f7acc690c88c86d0fab8772f6564d59cb8Patch, Third Party Advisory
• https://huntr.dev/bounties/80aabdc1-89fe-47b8-87ca-9d68107fc0b4Exploit, Third Party Advisory

Published

Jan 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0125An issue has been discovered in GitLab affecting all version…4.3
• CVE-2022-0128vim is vulnerable to Out-of-bounds Read7.8
• CVE-2022-0129Uncontrolled search path element vulnerability in McAfee Tec…6.7
• CVE-2022-0130Tenable.sc versions 5.14.0 through 5.19.1 were found to cont…8.1
• CVE-2022-0131Jimoty App for Android versions prior to 3.7.42 uses a hard-…3.3
• CVE-2022-0132peertube is vulnerable to Server-Side Request Forgery (SSRF)7.5
• CVE-2022-0134The AnyComment WordPress plugin before 0.2.18 does not have …8.8
• CVE-2022-0135An out-of-bounds write issue was found in the VirGL virtual …7.8
• CVE-2022-0136A vulnerability was discovered in GitLab versions 10.5 to 14…8.1
• CVE-2022-0137A heap buffer overflow in image_set_mask function of HTMLDOC…5.5
• CVE-2022-0138MMP: All versions prior to v1.0.3, PTP C-series: Device vers…7.5
• CVE-2022-0139Use After Free in GitHub repository radareorg/radare2 prior …9.8