CVE-2024-54136 – Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Below

https://notcve.org/view.php?id=CVE-2024-54136

06 Dec 2024 — ClipBucket V5 provides open source video hosting with PHP. ClipBucket-v5 Version 5.5.1 Revision 199 and below is vulnerable to PHP Deserialization vulnerability. The vulnerability exists in upload/upload.php where the user supplied input via collection get parameter is directly provided to unserialize function. As a result, it is possible for an adversary to inject maliciously crafted PHP serialized object and utilize gadget chains to cause unexpected behaviors of the application. This vulnerability is fixe... • https://github.com/MacWarrior/clipbucket-v5/commit/76a829c088f0813ab3244a3bd0036111017409b0 • CWE-502: Deserialization of Untrusted Data •