Beveiligingsadvies

CVE-2024-54136

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-12-06 15:07:42

Laatst bijgewerkt 2024-12-06 17:09:25

Toegewezen door GitHub_M

CVSS-score 9.8

Status PUBLISHED

Beschrijving

ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get parameter is directly provided to unserialize function. As a result, it is possible for an adversary to inject maliciously crafted PHP serialized object and utilize gadget chains to cause unexpected behaviors of the application. This vulnerability is fixed in 5.5.1 Revision 200.

← Alle CVE's bekijken Bekijk op cve.org ↗