CVE-2025-55912 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary f…
High CVSS: 7.3

CVE-2025-55912

An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary files without any authentication, due to missing access controls in the upload handler
Vendor
Oxygenz
Product
Clipbucket
CWE
CWE-434
Yayın Tarihi
2025-09-18 16:15:51
Güncelleme
2025-10-31 17:14:53
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-434 Clipbucket HIGH Oxygenz 2025

Referanslar

https://github.com/MacWarrior/clipbucket-v5/blob/5.5.0/upload/actions/photo_uploader.php https://github.com/MacWarrior/clipbucket-v5/releases?page=2 https://github.com/MacWarrior/clipbucket-v5/tree/5.5.0 https://medium.com/@mukund.s1337/cve-2025-55912-clipbucket-5-5-0-unauthenticated-arbitrary-file-upload-rce-720c0c0fbc58