CVE-2025-65113Medium· 6.5▾ SunlitClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content (users, videos, photos, collecti…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.4%
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content (users, videos, photos, collections) on the platform. This can lead to mass flagging attacks, content disruption, and moderation system abuse. This issue has been patched in version 5.5.2 - #164.
clipbucket >= 5.3, < 5.5.2-164Upgrade past the affected range:
clipbucket 5.5.2-164Connected by shared product, vendor, weakness, or advisory.
CVE-2025-62424Medium· 6.7ClipBucket is a web-based video-sharing platform
CVE-2025-62423Medium· 6.7ClipBucket V5 provides open source video hosting with PHP
CVE-2025-62429High· 7.2ClipBucket v5 is an open source video sharing platform
CVE-2025-62430Medium· 5.4ClipBucket v5 is an open source video sharing platform
CVE-2025-64114Medium· 6.5ClipBucket v5 is an open source video sharing platform
CVE-2025-64338Critical· 9.0ClipBucket v5 is an open source video sharing platform