Advisories · Technology
franklioxygen MyTube.
Every CVE that names franklioxygen MyTube among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
MyTube: CSRF Protection Bypass via Arbitrary x-api-key Header Value
- franklioxygen MyTube
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
MyTube: Visitor-Role Statistics Event Forgery Allows Analytics Data Poisoning
- franklioxygen MyTube
- CWE-20
- CVSS 8.7 High
MyTube: Unauthenticated Media Access via Static Routes Bypassing Login
- franklioxygen MyTube
- Authentication bypass
- CVSS 7.1 High
MyTube: Visitor Can Access Hidden Video Metadata and Content
- franklioxygen MyTube
- Broken access control
- CVSS 7.7 High
MyTube has Unauthenticated Account Lockout via Shared Login Attempt State
- franklioxygen MyTube
- Authentication bypass
- CVSS 8.9 High
MyTube has an Unauthenticated Admin Privilege Escalation via Passkey Registration
- franklioxygen MyTube
- Broken access control
- CVSS 7.4 High
MyTube has an Improper Access Control that Allows Complete Application Takeover
- franklioxygen MyTube
- Broken access control
- CVSS 2.7 Low
MyTube has Mass Assignment via Settings Management
- franklioxygen MyTube
- Broken access control
- CVSS 8.7 High
MyTube Allows Unauthorized Database Export by Guest Users
- franklioxygen MyTube
- Broken access control
- CVSS 6.5 Medium
MyTube has Rate Limiting Bypass via X-Forwarded-For Header Spoofing
- franklioxygen MyTube
- CWE-807
- CVSS 9.8 CriticalCritical · CVSS 9+
MyTube has an Authorization Bypass vulnerability
- franklioxygen MyTube
- Broken access control