CVE Feed

    Dashboard / CVE / CVE-2025-21624

    CVE-2025-21624

    ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 239, a file upload vulnerability exists in the Manage Playlist functionality of the application, specifically surrounding the uploading of playlist cover images. Without proper checks, an attacker can upload a PHP script file instead of an image file, thus allowing a webshell or other malicious files to be stored and executed on the server. This attack vector exists in both the admin area and low-level user area. This vulnerability is fixed in 5.5.1 - 239.

    Published:Jan 7, 2025
    Last Modified:Sep 5, 2025
    EPS:Jan 7, 2025
    EPSS Score:0.15668
    CVSS Score:9.8

    Affected Products

    Vendor
    Oxygenz
    Product
    Clipbucket

    Exploits

    https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-98vm-2xqm-xrcchttps://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-98vm-2xqm-xrcc

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs

    Related CVEs

    CVE-2026-32321 (CVSS 8.8) — ClipBucket v5 is an open source video sharing platform. An authenticated time-based blind SQL injection vulner…
    CVE-2026-28354 (CVSS 5.7) — ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, collection item operations…
    CVE-2026-26997 (CVSS 2) — ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authenticated use…
    CVE-2026-26005 (CVSS 5) — ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #45, in Clip Bucket V5, The Remote Pl…
    CVE-2026-25728 (CVSS 9.3) — ClipBucket v5 is an open source video sharing platform. Prior to 5.5.3 - #40, a Time-of-Check to Time-of-Use (…
    CVE-2026-21875 (CVSS 9.8) — ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#187 and below allow an attacker to per…
    CVE-2025-67418 (CVSS 9.8) — ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with…
    CVE-2025-65113 (CVSS 6.5) — ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass…
    CVE-2025-62709 (CVSS 6.8) — ClipBucket v5 is an open source video sharing platform. In ClipBucket version 5.5.2, a change to network.class…
    CVE-2025-64338 (CVSS 5.1) — ClipBucket v5 is an open source video sharing platform. In versions 5.5.2 - #156 and below, an authenticated r…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High