Franklioxygen

Mytube

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2026-24140

Exploit
  • EPSS 0.04%
  • Veröffentlicht 23.01.2026 23:59:56
  • Zuletzt bearbeitet 02.02.2026 13:26:17

MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below have a Mass Assignment vulnerability in the settings management functionality due to insufficient input validation. The application's saveSettings() f...

6.5

CVE-2026-24139

  • EPSS 0.03%
  • Veröffentlicht 23.01.2026 23:55:23
  • Zuletzt bearbeitet 02.02.2026 13:26:40

MyTube is a self-hosted downloader and player for several video websites. Versions 1.7.78 and below do not safeguard against authorization bypass, allowing guest users to download the complete application database. The application fails to properly v...

5.3

CVE-2026-23848

Exploit
  • EPSS 0.15%
  • Veröffentlicht 19.01.2026 20:34:40
  • Zuletzt bearbeitet 02.02.2026 13:27:34

MyTube is a self-hosted downloader and player for several video websites. Prior to version 1.7.71, a rate limiting bypass via `X-Forwarded-For` header spoofing allows unauthenticated attackers to bypass IP-based rate limiting on general API endpoints...

9.8

CVE-2026-23837

  • EPSS 0.33%
  • Veröffentlicht 19.01.2026 20:09:37
  • Zuletzt bearbeitet 02.02.2026 13:24:34

MyTube is a self-hosted downloader and player for several video websites. A vulnerability present in version 1.7.65 and poetntially earlier versions allows unauthenticated users to bypass the mandatory authentication check in the roleBasedAuthMiddlew...