CyberSecBulletin

Framasoft vulnerabilities

We track 2 vulnerabilities in Framasoft products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 15, 2025.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Framasoft vulnerabilities

  • 7.5 High severity

    Peertube: Access of Resource Using Incompatible Type

    CVE-2025-32948Framasoft

    The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs (Blind SSRF). Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity"

  • 7.5 High severity

    Peertube: Loop with Unreachable Exit Condition

    CVE-2025-32947Framasoft

    This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities.