← Back

CVE-2025-32947

nvd nist
Published: Apr 15, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: reefs@jfrog.com (Secondary)

Description

This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities.

Affected (1)

Products: Framasoft: Peertube
Framasoft
1 product
Peertube
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Peertube
Before 7.1.1

Related CWEs

CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (3)

Source: reefs@jfrog.com
Patch
Source: reefs@jfrog.com
Release Notes
Source: reefs@jfrog.com
ExploitThird Party Advisory

Timeline

No history available yet.