Description (CNA)
The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path traversal in the HLS endpoint.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 before 7.1.1 |
CWE
CWE-22
References
- https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1
- https://research.jfrog.com/vulnerabilities/peertube-hls-path-traversal/
ADP enrichment
No English description supplied.