CVE-2024-54136

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

C

lipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get parameter is directly provided to unserialize function. As a result, it is possible for an adversary to inject maliciously crafted PHP serialized object and utilize gadget chains to cause unexpected behaviors of the application. This vulnerability is fixed in 5.5.1 Revision 200.

References

Link	Resource
https://github.com/MacWarrior/clipbucket-v5/commit/76a829c088f0813ab3244a3bd0036111017409b0	Patch
https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-vxvf-5cmq-5f78	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*

History

22 Sep 2025, 17:52

Type	Values Removed	Values Added
References	~~() https://github.com/MacWarrior/clipbucket-v5/commit/76a829c088f0813ab3244a3bd0036111017409b0 -~~	() https://github.com/MacWarrior/clipbucket-v5/commit/76a829c088f0813ab3244a3bd0036111017409b0 - Patch
References	~~() https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-vxvf-5cmq-5f78 -~~	() https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-vxvf-5cmq-5f78 - Exploit, Third Party Advisory
First Time		Oxygenz Oxygenz clipbucket
CPE		cpe:2.3:a:oxygenz:clipbucket::::::::

06 Dec 2024, 16:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-12-06 16:15

Updated : 2025-09-22 17:52

NVD link : CVE-2024-54136

Mitre link : CVE-2024-54136

CVE.ORG link : CVE-2024-54136

JSON object : View

Products Affected

clipbucket

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2024-54136", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2024-12-06T16:15:22.500", "references": [{"url": "https://github.com/MacWarrior/clipbucket-v5/commit/76a829c088f0813ab3244a3bd0036111017409b0", "tags": ["Patch"], "source": "[email protected]"}, {"url": "https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-vxvf-5cmq-5f78", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get parameter is directly provided to unserialize function. As a result, it is possible for an adversary to inject maliciously crafted PHP serialized object and utilize gadget chains to cause unexpected behaviors of the application. This vulnerability is fixed in 5.5.1 Revision 200."}, {"lang": "es", "value": "ClipBucket V5 ofrece alojamiento de v\u00eddeo de c\u00f3digo abierto con PHP. ClipBucket-v5 versi\u00f3n 5.5.1 revisi\u00f3n 199 y anteriores son vulnerables a la vulnerabilidad de deserializaci\u00f3n de PHP. La vulnerabilidad existe en upload/upload.php, donde la entrada proporcionada por el usuario a trav\u00e9s del par\u00e1metro get de la colecci\u00f3n se proporciona directamente a la funci\u00f3n de deserializaci\u00f3n. Como resultado, es posible que un adversario inyecte un objeto serializado PHP creado con fines malintencionados y utilice cadenas de gadgets para provocar comportamientos inesperados en la aplicaci\u00f3n. Esta vulnerabilidad se solucion\u00f3 en 5.5.1 revisi\u00f3n 200."}], "lastModified": "2025-09-22T17:52:43.220", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oxygenz:clipbucket:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AC34DDF7-A466-48B8-8204-72FEC296F4B9", "versionEndExcluding": "5.5.1-200", "versionStartIncluding": "5.5.1-141"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}