CVE Feed

    Dashboard / CVE / CVE-2025-21623

    CVE-2025-21623

    ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template directory via a directory traversal, which results in a denial of service.

    Published:Jan 7, 2025
    Last Modified:Sep 5, 2025
    EPS:Jan 7, 2025
    EPSS Score:0.01705
    CVSS Score:7.5

    Affected Products

    Vendor
    Oxygenz
    Product
    Clipbucket

    Exploits

    https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-ffhj-hprx-7qvrhttps://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-ffhj-hprx-7qvr

    Related CVEs

    CVE-2026-32321 (CVSS 8.8) — ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulner…
    CVE-2026-28354 (CVSS 5.7) — ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, collection item operations…
    CVE-2026-26997 (CVSS 2) — ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authenticated use…
    CVE-2026-26005 (CVSS 5) — ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #45, in Clip Bucket V5, The Remote Pl…
    CVE-2026-25728 (CVSS 9.3) — ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #40, a Time-of-Check to Time-of-Use (…
    CVE-2026-21875 (CVSS 9.8) — ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#187 and below allow an attacker to per…
    CVE-2025-67418 (CVSS 9.8) — ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with…
    CVE-2025-65113 (CVSS 6.5) — ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass…
    CVE-2025-62709 (CVSS 6.8) — ClipBucket v5 is an open source video sharing platform. In ClipBucket version 5.5.2, a change to network.class…
    CVE-2025-64338 (CVSS 5.1) — ClipBucket v5 is an open source video sharing platform. In versions 5.5.2 - #156 and below, an authenticated r…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High