CVE-2022-0726: 
NixOS vulnerability analysis and mitigation

CVE-2022-0726 is a Missing Authorization vulnerability affecting the GitHub repository chocobozzz/peertube prior to version 4.1.0. The vulnerability was discovered and disclosed in February 2022, impacting the PeerTube software platform (NVD CVE).

The vulnerability is classified as CWE-862 (Missing Authorization) and received a CVSS v3.1 base score of 5.4 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N. This indicates that the vulnerability requires network access and low privileges to exploit, with no user interaction needed, potentially resulting in low-level impacts to confidentiality and integrity (NVD CVE).

The vulnerability could allow an attacker to bypass authorization checks when creating comments or ratings on videos, potentially accessing private content that should be restricted. This could lead to unauthorized access to private video content and associated features (GitHub Commit).

The vulnerability was fixed in PeerTube version 4.1.0. Users should upgrade to this version or later to address the security issue. The fix implements proper authorization checks for video privacy when creating comments and ratings (GitHub Commit).