PT-2024-36064 · Unknown · Clipbucket-V5

0Xbko · Published 2024-12-06 · Updated 2024-12-06 · CVE-2024-54136

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: ClipBucket-v5 versions 5.5.1 Revision 199 and below

Description: The issue exists in the upload/upload.php file where user-supplied input via the collection get parameter is directly provided to the unserialize function, allowing an adversary to inject maliciously crafted PHP serialized objects and utilize gadget chains to cause unexpected application behaviors.

Recommendations: For ClipBucket-v5 versions 5.5.1 Revision 199 and below, update to Revision 200 or later to resolve the issue. As a temporary workaround, consider restricting access to the upload/upload.php file or disabling the unserialize function for the collection get parameter until a patch is applied.

Exploit

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-54136

GHSA-VXVF-5CMQ-5F78

Affected Products

Clipbucket-V5

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/54xxx/CVE-2024-54136.json · Exploit
• 🔥 https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-vxvf-5cmq-5f78 · Exploit
• https://github.com/MacWarrior/clipbucket-v5/commit/76a829c088f0813ab3244a3bd0036111017409b0 · Patch
• https://osv.dev/vulnerability/CVE-2024-54136 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-54136 · Security Note
• https://twitter.com/CVEnew/status/1865057066303254746 · Twitter Post
• https://t.me/cvenotify/103358 · Telegram Post
• https://t.me/cvedetector/12238 · Telegram Post