medium6.5Public exploit code
CVE-2025-55911
An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ClipBucket 5.5.2 Build #90 - Server-Side Request Forgery (SSRF)2025-09-16 · remote · multiple
Impact
An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oxygenz | Clipbucket | before 5.5.2-90 |