PeerTube Denial of Service via Unhandled Filename Exception in User Import
A vulnerability exists in PeerTube where an authenticated user can cause the server to stop functioning persistently. When user import is enabled (which is the default setting), a registered user can upload an archive for importing. The server uses the yauzl library to read the archive, and if the library encounters an illegal filename, it raises an uncaught exception. This exception causes the server to crash and continuously repeat the crash on startup, effectively rendering the PeerTube server non-operational.
Vulmon