PT-2025-48351 · Unknown · Clipbucket

Published 2025-11-29 · Updated 2025-12-04 · CVE-2025-65113

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions ClipBucket versions prior to 5.5.2

Description ClipBucket is an open source video sharing platform. A flaw exists in the AJAX flagging system that permits unauthenticated users to flag content, including users, videos, photos, and collections. This authorization bypass can result in mass flagging attacks, content disruption, and abuse of the moderation system.

Recommendations Update to version 5.5.2 or later.

Exploit

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-65113

GHSA-9F8V-VPH8-PQ6Q

Affected Products

Clipbucket

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65113.json · Exploit
• 🔥 https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-9f8v-vph8-pq6q · Exploit
• https://github.com/MacWarrior/clipbucket-v5/commit/a83b807e592f85d98f1f156bd3cbb1ffcc230233 · Patch
• https://osv.dev/vulnerability/CVE-2025-65113 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65113 · Security Note
• https://twitter.com/dailycve/status/1996372246332592298 · Twitter Post
• https://twitter.com/CVEnew/status/1994599563613610462 · Twitter Post
• https://t.me/cveNotify/144306 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1994585034339029429 · Twitter Post
• https://t.me/CVEtracker/38447 · Telegram Post