CVE-2024-54136 - CVE House
Back to Database
Status published Critical CVE-2024-54136

Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

Vulnerability Description

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get parameter is directly provided to unserialize function. As a result, it is possible for an adversary to inject maliciously crafted PHP serialized object and utilize gadget chains to cause unexpected behaviors of the application. This vulnerability is fixed in 5.5.1 Revision 200.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-54136

Credits & Attribution

No credits recorded in the NVD database.

References

More from MacWarrior

View All →
CVE-2025-65113
ClipBucket v5 Unauthenticated Object Flagging Vulnerability
Medium 6.5
CVE-2025-64339
ClipBucket v5: Stored XSS Vulnerability in Manage Playlists
High 7.2
CVE-2025-64338
ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name
Medium 5.1
CVE-2025-64336
ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title
High 7.2
CVE-2025-64114
ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin
Medium 6.5

Affected Vendor

Affected Software

clipbucket-v5
Vulnerable Versions:
>= 5.5.1 Revision 141, < 5.5.1 Revision 200

Timeline

Official Publish: December 6th, 2024
Last Modified: December 6th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-502

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1505.003 Web Shell
Persistence
T1105 Ingress Tool Transfer
Command and Control
T1068 Exploitation for Privilege Escalation
Privilege Escalation