alltube vulnerabilities and fixes

Recent CVEs affecting alltube, with upgrade or downgrade steps. 3 tracked.

alltube has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-03-08. Highest priority: CVE-2022-0768 (score 61/100).

• CVE-2022-24739 HIGH 7.3 UPGRADE alltube is an html front end for youtube-dl
• CVE-2022-0768 CRITICAL 9.1 UPGRADE Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.
• CVE-2022-0692 MEDIUM 6.1 UPGRADE Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.

FAQ

How do I fix alltube vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is alltube being exploited right now?

None of the tracked alltube CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which alltube CVE should I patch first?

CVE-2022-0768 currently ranks highest (61/100): Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2..

RSS feed for alltube · ← Back to latest CVEs