CVE-2025-21624

Summary

CVE-2025-21624 is a file upload vulnerability affecting ClipBucket V5, an open-source video hosting solution built with PHP. The Manage Playlist functionality, which allows users to upload playlist cover images, is susceptible to this issue. If proper checks are bypassed, an attacker can upload a PHP script file instead of an image, resulting in the storage and execution of webshells or other malicious files on the server. This vulnerability poses a threat in both the admin area and user area. The vulnerability has been addressed in the 5.5.1 - 239 update.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.