Description

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template directory via a directory traversal, which results in a denial of service.

Classification

CVE ID: CVE-2025-21623

CVSS Base Severity: HIGH

CVSS Base Score: 7.5

Affected Products

Vendor: MacWarrior

Product: clipbucket-v5

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 12.66% (scored less or equal to compared to others)

EPSS Date: 2025-02-05 (when was this score calculated)

References

https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-ffhj-hprx-7qvr
https://github.com/MacWarrior/clipbucket-v5/commit/75d663f010cd8569eb9e278f030838174fb30188

Timeline