CVE-2025-21623 - CVE House

Status published High CVE-2025-21623

ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service

7.5 CVSS

Vulnerability Description

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template directory via a directory traversal, which results in a denial of service.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-21623

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from MacWarrior

View All →

CVE-2025-65113

ClipBucket v5 Unauthenticated Object Flagging Vulnerability

Medium 6.5

CVE-2025-64339

ClipBucket v5: Stored XSS Vulnerability in Manage Playlists

High 7.2

CVE-2025-64338

ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name

Medium 5.1

CVE-2025-64336

ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

High 7.2

CVE-2025-64114

ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

Medium 6.5

Affected Vendor

MacWarrior

View all reports →

Affected Software

clipbucket-v5

Vulnerable Versions:

< 5.5.1 - 238

Timeline

Official Publish: January 7th, 2025

Last Modified: January 7th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-22 CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1005 Data from Local System

Collection

T1552 Unsecured Credentials

Credential Access

T1565.001 Stored Data Manipulation