CVE-2025-65113CWE-770denial-of-service

CVE-2025-65113

Medium · published November 29, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content (users, videos, photos, collections) on the platform. This can lead to mass flagging attacks, content disruption, and moderation system abuse. This issue has been patched in version 5.5.2 - #164.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00398 · 32.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-11-29T06:16Z
Affected products (1)
ProductVersionsFixed in
oxygenz/clipbucket≥ 5.3, < 5.5.2-1645.5.2-164
References (3)
https://github.com/MacWarrior/clipbucket-v5/commit/a83b807e592f85d98f1f156bd3cbb1ffcc230233 · [email protected]https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-9f8v-vph8-pq6q · [email protected]https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-9f8v-vph8-pq6q · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 29 NOV 00:34Z
    ClipBucket v5 Unauthenticated Object Flagging Vulnerability
    cvelistv5