CVE-2025-55912: Clipbucket: tehlikeli dosya yükleme

Açıklama (NVD)

An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary files without any authentication, due to missing access controls in the upload handler

Özet bilgiler

Ürün

Oxygenz Clipbucket

CVSS v3.1

7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

%1,53 (yüzdelik 75)

CWE

CWE-434

Yama

Mevcut

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• github.com
• github.com
• medium.com
• CWE-434