Description (CNA)
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of authorization. They can upload subtitles, edit their name or delete them. This issue has been patched in version 5.5.3 - #133.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MacWarrior / clipbucket-v5 | affected < 5.5.3 - #133 |
CWE
CWE-639, CWE-863
References
ADP enrichment
No English description supplied.