CVE-2021-3780

peertube is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Score

CVSS 3.0 7.6 High

Status

Modified - security@huntr.dev

Published

2021-09-15

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Chocobozzzpeertube (Chocobozzz)
• Peertube (Framasoft)

References

• https://github.com/chocobozzz/peertube/commit/0ea2f79d45b301fcd660efc894469a99b2239bf6
• https://huntr.dev/bounties/282807a8-4bf5-4fe2-af62-e05f945b3d65