CVE-2025-32943

Summary

The vulnerability allows any authenticated user to leak the contents of arbitrary “.m3u8” files from the PeerTube server due to a path traversal in the HLS endpoint.

Affected Software

Weaknesses

• CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://research.jfrog.com/vulnerabilities/peertube-hls-path-traversal/

References

• https://github.com/Chocobozzz/PeerTube/releases/tag/v7.1.1
• https://research.jfrog.com/vulnerabilities/peertube-hls-path-traversal/

• ←Previous
• Next→