CVE-2025-28142

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Apr 15, 2025
Updated: May 1, 2025
CWE ID 77

Summary

CVE-2025-32947 is a vulnerability affecting PeerTube servers. An attacker can exploit this issue by sending crafted ActivityPub activities to the "inbox" endpoint, resulting in an infinite loop and causing the server to stop responding to requests, effectively rendering it unavailable. This condition can lead to denial-of-service (DoS) attacks and potential service disruptions. PeerTube developers are advised to address this vulnerability promptly to prevent potential exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share