CyberRota Analysis
AI-GeneratedAuthenticated users of ClipBucket versions prior to 5.5.3-#182 are vulnerable to a file upload flaw that permits remote code execution by uploading a malicious PHP file disguised as an image. The vulnerability arises from the FileUpload::manageFile() function, which does not properly handle file extensions after MIME validation, enabling attackers to execute arbitrary PHP code on the server. Organizations using affected versions should prioritize patching this vulnerability to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ClipBucket v5 before 5.5.3-#182 contains a file upload vulnerability that allows authenticated users to achieve remote code execution by uploading a PHP file with valid image magic bytes through the photo upload endpoint. The FileUpload::manageFile() function in fileupload.class.php fails to update the file extension after MIME validation, allowing an attacker-controlled .php extension to persist on disk and execute as PHP via PHP-FPM when the uploaded file is retrieved.