Description (CNA)
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authenticated user can store the XSS payload. The payload is triggered by administrator. Version 5.5.3 #59 fixes the issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MacWarrior / clipbucket-v5 | affected < 5.5.3 #59 |
CWE
CWE-79
References
- https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-97r6-4hmx-hcrh
- https://github.com/MacWarrior/clipbucket-v5/commit/2da4c8e41f9e4baf47ff89f8a674fbe9b63ac76d
ADP enrichment
No English description supplied.
No references supplied.