CVE-2025-65113: ClipBucket v5 Unauthenticated Object Flagging Vulnerability
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content (users, videos, photos, collections) on the platform. This can lead to mass flagging attacks, content disruption, and moderation system abuse. This issue has been patched in version 5.5.2 - #164.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65113?
The severity of CVE-2025-65113 is considered high due to the potential for unauthorized content flagging by unauthenticated users.
How do I fix CVE-2025-65113?
To fix CVE-2025-65113, you should update ClipBucket to version 5.5.2 or later, which addresses the authorization bypass vulnerability.
What types of content are affected by CVE-2025-65113?
CVE-2025-65113 affects various types of content on the ClipBucket platform, including users, videos, photos, and collections.
Who is affected by CVE-2025-65113?
Any user of ClipBucket version prior to 5.5.2 is potentially affected by CVE-2025-65113 as it allows unauthenticated users to flag content.
What are the consequences of CVE-2025-65113?
The consequences of CVE-2025-65113 can lead to mass flagging of content, which may disrupt the user experience and content visibility on the platform.