CVE-2025-65113 - CVE House
Back to Database
Status published Medium CVE-2025-65113

ClipBucket v5 Unauthenticated Object Flagging Vulnerability

Vulnerability Description

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content (users, videos, photos, collections) on the platform. This can lead to mass flagging attacks, content disruption, and moderation system abuse. This issue has been patched in version 5.5.2 - #164.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-65113

Credits & Attribution

No credits recorded in the NVD database.

References

More from MacWarrior

View All →
CVE-2025-64339
ClipBucket v5: Stored XSS Vulnerability in Manage Playlists
High 7.2
CVE-2025-64338
ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name
Medium 5.1
CVE-2025-64336
ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title
High 7.2
CVE-2025-64114
ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin
Medium 6.5
CVE-2025-62715
ClipBucket v5: Stored XSS via Collection Tags
Medium 5.3

Affected Vendor

Affected Software

clipbucket-v5
Vulnerable Versions:
< 5.5.2 - #164

Timeline

Official Publish: November 29th, 2025
Last Modified: December 1st, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Weaknesses (CWE)

CWE-770

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact
T1190 Exploit Public-Facing Application
Initial Access
T1562 Impair Defenses
Defense Evasion
T1046 Network Service Discovery
Discovery