CVE-2022-24739

Packagist/rudloff/alltube CVE-2022-24739: high 7.3, EPSS 0.91%

Server-Side Request Forgery and Open Redirect in AllTube Download

Action: Upgrade rudloff/alltube to 3.0.3 or later.

composer require rudloff/alltube:3.0.3

Affected

Fixed versions

Sources

• osv: GHSA-75p7-527p-w8wp
• https://github.com/Rudloff/alltube/security/advisories/GHSA-75p7-527p-w8wp
• https://nvd.nist.gov/vuln/detail/CVE-2022-24739
• https://github.com/ytdl-org/youtube-dl/issues/30691
• https://github.com/Rudloff/alltube/commit/3a4f09dda0a466662a4e52cde674749e0c668e8d
• https://github.com/Rudloff/alltube/commit/8913f27716400dabf4906a5ad690a5238f73496a
• https://github.com/Rudloff/alltube/commit/bc14b6e45c766c05757fb607ef8d444cbbfba71a
• https://github.com/FriendsOfPHP/security-advisories/blob/master/rudloff/alltube/CVE-2022-24739.yaml
• https://github.com/Rudloff/alltube
• https://github.com/Rudloff/alltube/releases/tag/3.0.3

CVE-2022-24739 · published 2022-03-09T15:17:31Z · modified 2024-02-16T08:11:49.713841Z · JSON