Authorization Bypass Vulnerability in ClipBucket v5 by MacWarrior
CVE-2025-65113

6.5MEDIUM

Key Information:

Vendor

Macwarrior

Status
Clipbucket-v5
Vendor
CVE Published:
29 November 2025

What is CVE-2025-65113?

An authorization bypass flaw in ClipBucket v5, specifically in the AJAX flagging system, allows unauthorized users to flag content indiscriminately. This vulnerability can lead to mass flagging attacks, compromising the integrity of the platform's moderation system. It poses significant risks, including content disruption and the potential for abuse of the moderation features. The issue has been addressed in version 5.5.2.

Affected Version(s)

clipbucket-v5 < 5.5.2 - #164

References

https://github.com/MacWarrior/clipbucket-v5/security/advi...
x_refsource_CONFIRM
https://github.com/MacWarrior/clipbucket-v5/commit/a83b80...
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.