CyberRota Analysis
AI-GeneratedClipBucket versions prior to 5.5.3-#197 are vulnerable to a path traversal flaw in the admin template editor, allowing authenticated administrators to overwrite PHP files by exploiting directory traversal sequences. This vulnerability can lead to remote code execution under the web server user, posing a significant risk to system integrity. Organizations using affected versions should prioritize patching to mitigate potential exploitation by attackers with manage_template_access permissions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the admin template editor that allows authenticated administrators to overwrite PHP files by supplying directory traversal sequences in the folder parameter. Attackers with manage_template_access permission can traverse outside the layout directory to modify executable PHP files and achieve remote code execution as the web server user.